CVE-2024-44659

Critical

Published: 17/11/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL injection via the email parameter in forgot-password.php.

An attacker could exploit this vulnerability to manipulate the database, potentially leading to unauthorized data access or modification.

It is recommended to update the portal to the latest version and apply security patches.

Original NVD description (English source)

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.