PT-2025-48079

Name of the Vulnerable Software and Affected Versions PHPGURUKUL Online Shopping Portal version 2.1 Description An Insecure Direct Object Reference IDOR exists in the Track order function. This allows information disclosure through manipulation of the oid parameter. An IDOR occurs when an...

CVE-2025-65647

Insecure Direct Object Reference IDOR in the Track order function in PHPGURUKUL Online Shopping Portal 2.1 allows information disclosure via the oid parameter...

CVE-2025-65647

Insecure Direct Object Reference IDOR in the Track order function in PHPGURUKUL Online Shopping Portal 2.1 allows information disclosure via the oid parameter...