CVE-2025-26156

CVE-2025-26156 affects PHPGurukul Online Shopping Portal v2.1, with a SQL Injection in /shopping/track-orders.php exploited via the orderid POST parameter. The vulnerability can allow remote code execution and has a CVSS v3.1 base score of 8.8 (HIGH) with network access, low attack complexity, an...

CVE-2025-9012

The CVE-2025-9012 entry describes an SQL injection in PHPGurukul Online Shopping Portal Project 2.0, specifically in the file shopping/bill-ship-addresses.php through manipulation of the billingpincode parameter. This vulnerability can be exploited remotely and has publicly disclosed exploit info...

CVE-2025-9011

CVE-2025-9011 affects PHPGurukul Online Shopping Portal Project 2.0. The vulnerability is in the file /shopping/signup.php, where manipulation of the emailid parameter enables a SQL injection. This can be exploited remotely, and the exploit has been disclosed publicly. Multiple connected sources ...

CVE-2025-9013

Summary of vulnerability (CVE-2025-9013) : PHPGurukul Online Shopping Portal Project 2.0 has a SQL injection flaw in the file /shopping/password-recovery.php triggered by manipulating the emailid parameter. This vulnerability can be exploited remotely and has publicly disclosed exploits. Multiple...

CVE-2025-61096

The CVE-2025-61096 entry affects PHPGurukul Online Shopping Portal Project v2.1. Affected component: /shopping/login.php fullname parameter. Root cause: SQL injection due to lack of input validation/escaping in fullname, enabling arbitrary SQL execution. Documented impact: unauthorized access to ...