Online Shopping Portal Project

5 CVEs product

Monthly

CVE-2025-61096 MEDIUM POC This Month

PHPGurukul Online Shopping Portal Project v2.1 is vulnerable to SQL Injection in /shopping/login.php via the fullname parameter.

SQLi PHP Online Shopping Portal Project
NVD GitHub
CVSS 3.1
6.5
EPSS
0.0%
CVE-2025-9013 MEDIUM This Month

A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Online Shopping Portal Project
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.0%
CVE-2025-9012 MEDIUM This Month

A vulnerability was identified in PHPGurukul Online Shopping Portal Project 2.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Online Shopping Portal Project
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.0%
CVE-2025-9011 MEDIUM This Month

A vulnerability was determined in PHPGurukul Online Shopping Portal Project 2.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Online Shopping Portal Project
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.0%
CVE-2025-26156 HIGH POC This Week

A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbitrary code via orderid POST request. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE PHP SQLi Online Shopping Portal Project
NVD GitHub
CVSS 3.1
8.8
EPSS
2.7%
CVE-2025-61096
EPSS 0% CVSS 6.5
MEDIUM POC This Month

PHPGurukul Online Shopping Portal Project v2.1 is vulnerable to SQL Injection in /shopping/login.php via the fullname parameter.

SQLi PHP Online Shopping Portal Project
NVD GitHub
CVE-2025-9013
EPSS 0% CVSS 6.9
MEDIUM This Month

A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Online Shopping Portal Project
NVD GitHub VulDB
CVE-2025-9012
EPSS 0% CVSS 6.9
MEDIUM This Month

A vulnerability was identified in PHPGurukul Online Shopping Portal Project 2.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Online Shopping Portal Project
NVD GitHub VulDB
CVE-2025-9011
EPSS 0% CVSS 6.9
MEDIUM This Month

A vulnerability was determined in PHPGurukul Online Shopping Portal Project 2.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Online Shopping Portal Project
NVD GitHub VulDB
CVE-2025-26156
EPSS 3% CVSS 8.8
HIGH POC This Week

A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbitrary code via orderid POST request. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE PHP SQLi +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy