CVE-2021-46110

Online Shopping Portal (version 3.1) contains multiple time-based SQL injection vulnerabilities in the email and contactno parameters. This is evidenced by PT-2022-12571, which specifies affected version 3.1 and exploitation via those parameters, with recommended mitigation to restrict access to ...

CVE-2025-1578

CVE-2025-1578 affects PHPGurukul/Campcodes Online Shopping Portal 2.1. The vulnerability is in the /search-result.php file, where the product parameter can be manipulated to trigger an SQL injection. The issue is exploitable remotely, and public disclosures exist. Connected sources confirm the im...

CVE-2025-5079

CVE-2025-5079 affects Campcodes Online Shopping Portal version 1.0. The vulnerability lies in the file /admin/updateorder.php where manipulation of the remark parameter can lead to a SQL injection. The attack can be performed remotely, and a published exploit exists. Impact details in connected d...

CVE-2023-38890

CVE-2023-38890 affects Online Shopping Portal Project 3.1, where the login form’s username input allows SQL Injection due to insufficient input validation. This is a remote code execution/unauthorized-access risk via crafted queries, with public references to exploits (e.g., ExploitDB 50029) and ...

CVE-2025-1855

PHPGurukul Online Shopping Portal 2.1 is affected by a SQL injection in product-details.php. The vulnerability is triggered by manipulating the quality/price/value/name/summary/review parameters, exploitable remotely, with high impact on confidentiality, integrity, and availability (per CVSS data...

CVE-2025-5078

CVE-2025-5078 affects Campcodes Online Shopping Portal 1.0 (PHPGurukul/Campcodes). The /admin/subcategory.php script is vulnerable: manipulation of the Category argument enables SQL injection. Exploitation is remote and PoC/public exploit activity is noted. Remediation status is not provided in t...

CVE-2024-10745

PHPGurukul Online Shopping Portal 2.0 is affected. The vulnerable component is /admin/assets/plugins/DataTables/media/unit_testing/templates/deferred_table.php, where manipulation of the scripts parameter enables cross-site scripting. The issue can be triggered remotely, and public exploitation i...

CVE-2025-5367

PHPGurukul Online Shopping Portal Project 1.0 is affected by a SQL injection in the /category.php file, triggered by manipulating the Product parameter. Multiple sources (CNVD/CNNVD/NVD/RH-CVE) describe remote exploitation with publicly disclosed exploits. The vulnerability stems from lack of inp...

CVE-2021-37807

Summary: CVE-2021-37807 affects the Online Shopping Portal version 3.1. The vulnerability is an SQL Injection through the email parameter on the /check_availability.php endpoint (used to check if a new user email already exists). The issue is documented across multiple sources (NVD, CNVD, Red Hat...

CVE-2024-9326

PHPGurukul Online Shopping Portal 2.0 Admin Panel has a SQL injection vulnerability in /shopping/admin/index.php, triggered by manipulating the username parameter. Remote exploitation is possible and public exploits have been disclosed. Affected component is the Admin Panel logic handling the use...

CVE-2024-10757

PHPGurukul Online Shopping Portal 2.0 is affected by a cross-site scripting vulnerability in /admin/assets/plugins/DataTables/media/unit_testing/templates/js_data.php. The issue arises from manipulation of the scripts argument, enabling remote attackers to inject arbitrary scripts. Exploitation i...

CVE-2024-10755

PHPGurukul Online Shopping Portal 2.0 contains a cross-site scripting vulnerability in /admin/assets/plugins/DataTables/media/unit_testing/templates/empty_table.php, triggered by manipulation of the scripts argument. The issue allows remote exploitation and is reported as public. The root cause i...

CVE-2024-10768

The CVE-2024-10768 entry concerns PHPGurukul Online Shopping Portal 2.0, where cross-site scripting affects the code path in /admin/assets/plugins/DataTables/media/unit_testing/templates/two_tables.php. The root cause is lack of proper filtering/escaping of user-supplied data in the scripts param...

CVE-2024-10744

CVE-2024-10744 affects PHPGurukul Online Shopping Portal 2.0, specifically the /admin/assets/plugins/DataTables/media/unit_testing/templates/complex_header_2.php functionality. The issue is a cross-site scripting flaw triggered by manipulating the scripts parameter, enabling remote exploitation. ...

CVE-2024-10746

Summary: CVE-2024-10746 affects PHPGurukul Online Shopping Portal 2.0, specifically the file /admin/assets/plugins/DataTables/media/unit_testing/templates/dom_data.php. The vulnerability arises from manipulation of the scripts argument, enabling cross-site scripting (XSS). It can be triggered rem...

CVE-2023-3605

PHPGurukul Online Shopping Portal 1.0 is affected in the Registration Page component, where inadequate restriction of excessive authentication attempts allows remote exploitation. The vulnerability arises from insufficient rate-limiting controls on login/registration flows, enabling an attacker t...

CVE-2024-10747

The CVE-2024-10747 entry concerns PHPGurukul Online Shopping Portal 2.0. The vulnerability is in /admin/assets/plugins/DataTables/media/unit_testing/templates/dom_data_th.php, where lack of input filtering/escaping for the scripts parameter allows cross-site scripting. A remote attacker can explo...

CVE-2024-10756

CVE-2024-10756 affects PHPGurukul Online Shopping Portal 2.0. The vulnerability is in the file /admin/assets/plugins/DataTables/media/unit_testing/templates/html_table.php, where manipulation of the scripts argument enables cross-site scripting (XSS) . Documents indicate the attack is remotely ex...

CVE-2024-10743

CVE-2024-10743 affects PHPGurukul Online Shopping Portal 2.0, specifically the file /shopping/admin/assets/plugins/DataTables/examples/examples_support/editable_ajax.php. The vulnerability is a cross-site scripting (XSS) issue caused by manipulation of an argument value in an unknown function of ...

CVE-2023-37772

CVE-2023-37772 affects Online Shopping Portal Project v3.1, with a SQL injection vulnerability in the Email parameter of /shopping/login.php. The issue is documented across multiple sources (NVD, Red Hat, CVE lists, PT-Security) as a SQL injection in the login endpoint, indicating the root cause ...

CVE-2024-10754

CVE-2024-10754 | PHPGurukul Online Shopping Portal 2.0 suffers a cross-site scripting flaw in /admin/assets/plugins/DataTables/media/unit_testing/templates/dymanic_table.php. The issue stems from inadequate filtering/escaping of the scripts parameter, enabling remote exploitation. Exploit details...

CVE-2024-10753

The CVE-2024-10753 entry concerns PHPGurukul Online Shopping Portal 2.0, affecting unknown code in admin/assets/plugins/DataTables/media/unit_testing/templates/dom_data_two_headers.php. Multiple connected sources describe a cross-site scripting vulnerability triggered by manipulation of the scrip...

CVE-2024-39090

The connected Red Hat and vulnerability records corroborate CVE-2024-39090 for PHPGurukul Online Shopping Portal Project v2.0 (and 2.0.3 in metrics). The issue is a CSRF that can precipitate Stored XSS, allowing an attacker to execute arbitrary JavaScript in a user’s session and possibly take ove...

CVE-2025-57148

CVE-2025-57148 affects phpgurukul Online Shopping Portal 2.0. The vulnerability is an Arbitrary File Upload in /admin/insert-product.php caused by lack of extension validation. Reported details across multiple sources confirm the affected software and the specific component, with CVSSv3.1 vector ...

CVE-2025-52074

The CVE-2025-52074 entry concerns PHPGURUKUL Online Shopping Portal 2.1 with a Cross-Site Scripting (XSS) vulnerability in the quantity parameter used when adding a product to the cart. Root cause identified in the description is missing input sanitization for that parameter. The connected source...

CVE-2024-44664

PHPGurukul Online Shopping Portal 2.0 is affected by an SQL Injection in product-details.php. The vulnerability arises from lack of input validation for the name, summary, review, quality, price, and value parameters, allowing an attacker to alter SQL queries executed by the application. Based on...

CVE-2025-57576

CVE-2025-57576 affects the PHPGurukul Online Shopping Portal 2.1, with a Cross-Site Scripting (XSS) vulnerability in the /admin/updateorder.php endpoint. The issue arises from insufficient input validation/escaping of user-supplied data, enabling an attacker to inject and execute arbitrary web sc...

CVE-2024-44660

The CVE-2024-44660 entry concerns PHPGurukul Online Shopping Portal 2.0 with a SQL Injection in login.php, exploitable via the fullname, emailid, and contactno parameters. Root cause: lack of input validation/parameterized queries allows arbitrary SQL to be executed against the backend database. ...

CVE-2024-44661

The CVE-2024-44661 entry concerns the PHPGurukul Online Shopping Portal 2.0. Affected component: the my-cart.php file, specifically the quantity parameter. Root cause: lack of proper input filtering/escaping in the quantity parameter, enabling Cross Site Scripting (XSS). Impact: attackers can inj...

CVE-2024-44662

The CVE-2024-44662 entry applies to PHPGurukul Online Shopping Portal 2.0, where the admin page’s username parameter is vulnerable to SQL Injection. The root cause is lack of input validation/sanitization allowing attacker-supplied SQL to be executed, potentially exposing data. Public references ...

CVE-2024-44659

CVE-2024-44659 affects the PHPGurukul Online Shopping Portal 2.0. The vulnerability is a SQL Injection in the forgot-password.php script through the email parameter, due to improper input handling. This can enable arbitrary SQL execution with high impact on confidentiality, integrity, and availab...

CVE-2025-65647

CVE-2025-65647 applies to PHPGURUKUL Online Shopping Portal 2.1, where an Insecure Direct Object Reference (IDOR) in the Track order function allows information disclosure via the oid parameter. The vulnerability stems from insufficient access control when referencing data sent from the client as...

CVE-2024-44663

PHPGurukul Online Shopping Portal 2.0 is affected by a SQL Injection vulnerability in the search-result.php file, exploitable via the product parameter. The root cause is lack of input validation for externally supplied SQL in the product parameter, as reported across multiple sources (CNVD/CNNVD...