CVE-2026-5635

A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. Affected by this issue is some unknown functionality of the file /categorywise-products.php of the component Parameter Handler. The manipulation of the argument cid results in sql injection. The attack can be...

Sql injection

ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter...