CVE-2025-57148: phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of extension validation.

PriorityP352critical9.1CVSS 3.1

AVNACLPRHUINSCCHIHAH

EPSS

0.45%

36.2th percentile

phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of extension validation.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
phpgurukul	online_shopping_portal	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.