CVE-2026-5583

CWE-74CWE-89 — SQL Injection3 documents3 sources
Severity
5.3MEDIUM
EPSS
0.0%
top 98.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Online Shopping Portal Project
Timeline
PublishedApr 5

Description

A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-x6hr-674c-qfc3: A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2↗2026-04-05
▶
CVEList
PHPGurukul Online Shopping Portal Project Parameter my-profile.php sql injection↗2026-04-05
▶
CVE-2026-5583 (MEDIUM CVSS 5.3) | A security vulnerability has been d | cvebase.io