PHPGurukul Online Shopping Portal Project vulnerabilities
4 known CVE vulnerabilities in PHPGurukul Online Shopping Portal Project, translated and rated.
- CVE-2026-5636Medium
SQL Injection vulnerability in PHPGurukul Online Shopping Portal Project 2.1. Unknown part of /cancelorder.php in Parameter Handler allows manipulation of oid argument, leading to SQL injection. Remote attack possible. Exploit published.
- CVE-2026-5635Medium
SQL Injection vulnerability in PHPGurukul Online Shopping Portal Project 2.1. Unknown functionality in /categorywise-products.php in Parameter Handler allows manipulation of cid argument, leading to SQL injection. Remote attack possible. Exploit published.
- CVE-2026-5583Medium
SQL Injection vulnerability in PHPGurukul Online Shopping Portal Project 2.1. Unknown part of /my-profile.php in Parameter Handler allows manipulation of fullname argument, leading to SQL injection. Remote attack possible. Exploit published.
- CVE-2026-5558Medium
In PHPGurukul Online Shopping Portal Project up to version 2.1, a SQL injection vulnerability was found in the file /pending-orders.php via manipulation of the ID argument. The attack can be performed remotely and the exploit has been published.