Phpgurukul Online Shopping Portal vulnerabilities

CVE-2023-38890 [HIGH] CWE-89 CVE-2023-38890: Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username field, enabling SQL Injection attacks.

CVE-2024-9326 [CRITICAL] CWE-89 CVE-2024-9326: A vulnerability classified as critical was found in PHPGurukul Online Shopping Portal 2.0. This vuln A vulnerability classified as critical was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /shopping/admin/index.php of the component Admin Panel. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and

CVE-2025-5367 [CRITICAL] CWE-74 CVE-2025-5367: A vulnerability was found in PHPGurukul Online Shopping Portal Project 1.0. It has been declared as A vulnerability was found in PHPGurukul Online Shopping Portal Project 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument Product leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-1855 [HIGH] CWE-74 CVE-2025-1855: A vulnerability was found in PHPGurukul Online Shopping Portal 2.1. It has been declared as critical A vulnerability was found in PHPGurukul Online Shopping Portal 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /product-details.php. The manipulation of the argument quality/price/value/name/summary/review leads to sql injection. The attack can be launched remotely. The exploit has been disclo

CVE-2025-57148 [CRITICAL] CWE-434 CVE-2025-57148: phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-produc phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of extension validation.

CVE-2023-3605 [CRITICAL] CWE-307 CVE-2023-3605: A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Registration Page. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be launched remotely. The associated identifier of thi

CVE-2025-5078 [CRITICAL] CWE-74 CVE-2025-5078: A vulnerability was detected in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected is an unkn A vulnerability was detected in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected is an unknown function of the file /admin/subcategory.php. Performing manipulation of the argument Category results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

CVE-2024-44659 [CRITICAL] CWE-89 CVE-2024-44659: PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forg PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.

CVE-2025-5079 [CRITICAL] CWE-74 CVE-2025-5079: A flaw has been found in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected by this vulnerabi A flaw has been found in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/updateorder.php. Executing manipulation of the argument remark can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.

CVE-2021-46110 [CRITICAL] CWE-89 CVE-2021-46110: Online Shopping Portal v3.1 was discovered to contain multiple time-based SQL injection vulnerabilit Online Shopping Portal v3.1 was discovered to contain multiple time-based SQL injection vulnerabilities via the email and contactno parameters.

CVE-2023-37772 [HIGH] CWE-89 CVE-2023-37772: Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Email parameter at /shopping/login.php.

CVE-2025-1578 [HIGH] CWE-74 CVE-2025-1578: A vulnerability, which was classified as critical, was found in PHPGurukul/Campcodes Online Shopping A vulnerability, which was classified as critical, was found in PHPGurukul/Campcodes Online Shopping Portal 2.1. This affects an unknown part of the file /search-result.php. The manipulation of the argument Product leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2021-37807 [HIGH] CWE-89 CVE-2021-37807: An SQL Injection vulneraility exists in https://phpgurukul.com Online Shopping Portal 3.1 via the em An SQL Injection vulneraility exists in https://phpgurukul.com Online Shopping Portal 3.1 via the email parameter on the /check_availability.php endpoint that serves as a checker whether a new user's email is already exist within the database.

CVE-2024-44663 [MEDIUM] CWE-89 CVE-2024-44663: PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in se PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php.

CVE-2024-44662 [MEDIUM] CWE-89 CVE-2024-44662: PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in t PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page.

CVE-2024-44664 [MEDIUM] CWE-89 CVE-2024-44664: PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php.

CVE-2024-44660 [MEDIUM] CWE-89 CVE-2024-44660: PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php.

CVE-2024-10755 [MEDIUM] CWE-79 CVE-2024-10755: A vulnerability classified as problematic has been found in PHPGurukul Online Shopping Portal 2.0. A A vulnerability classified as problematic has been found in PHPGurukul Online Shopping Portal 2.0. Affected is an unknown function of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/empty_table.php. The manipulation of the argument scripts leads to cross site scripting. It is possible to launch the attack remotely. The exploit

CVE-2024-10745 [MEDIUM] CWE-79 CVE-2024-10745: A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been rated as problematic A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/deferred_table.php. The manipulation of the argument scripts leads to cross site scripting. The attack may be launched remo

CVE-2024-10744 [MEDIUM] CWE-79 CVE-2024-10744: A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been declared as problema A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/complex_header_2.php. The manipulation of the argument scripts leads to cross site scripting. The attack can be la