Online Shopping Portal Project

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-61096 MEDIUM POC This Month

PHPGurukul Online Shopping Portal Project v2.1 is vulnerable to SQL Injection in /shopping/login.php via the fullname parameter.

SQLi PHP Online Shopping Portal Project

NVD GitHub

CVSS 3.1

6.5

EPSS

0.0%

CVE-2025-26156 HIGH POC This Week

A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbitrary code via orderid POST request. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE PHP SQLi Online Shopping Portal Project

NVD GitHub

CVSS 3.1

8.8

EPSS

2.7%

CVE-2025-61096

EPSS 0% CVSS 6.5

MEDIUM POC This Month

PHPGurukul Online Shopping Portal Project v2.1 is vulnerable to SQL Injection in /shopping/login.php via the fullname parameter.

SQLi PHP Online Shopping Portal Project

NVD GitHub

CVE-2025-26156

EPSS 3% CVSS 8.8

HIGH POC This Week

RCE PHP SQLi +1

NVD GitHub