CVE-2024-44659
CriticalSummary
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL injection via the email parameter in forgot-password.php.
Risk Assessment
An attacker could exploit this vulnerability to manipulate the database, potentially leading to unauthorized data access or modification.
Recommendation
It is recommended to update the portal to the latest version and apply security patches.
Other vulnerabilities in PHPGurukul Online Shopping Portal
See all- CVE-2026-5606Medium
PHPGurukul Online Shopping Portal Project 2.1 is vulnerable to SQL injection via the 'orderid' parameter in the file /order-details.php. An attacker can remotely manipulate this parameter, leading to unauthorized SQL queries.
- CVE-2026-5560Medium
A SQL injection vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1 in the file /payment-method.php. Manipulation of the paymethod argument allows remote attack. The exploit has been made public.
- CVE-2026-5552Medium
A SQL injection vulnerability was identified in PHPGurukul Online Shopping Portal Project 2.1 in the file /sub-category.php. Manipulation of the pid argument allows remote attack. The exploit has been made public.
Original NVD description (English source)
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.