Cpe:2.3:a:code-Projects:online_shopping_system:1.0:*:*:*:*:*:*:*

The Online Shopping System 1.0 contains an unauthenticated SQL injection vulnerability in the search functionality of /action.php, allowing remote attackers to execute arbitrary database queries.