Approved changes feed: RSS · Atom

cpe:2.3:a:phpgurukul:online_shopping_portal:3.1:*:*:*:*:*:*:*

part: a version: 3.1 update: *

VendorPhpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d)
ProductOnline Shopping Portal (fc21f4c1-dbf8-5eb0-8284-b3fecb444d34)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-38890 vulnerable 2026-06-08 06:08:18.943324 Details available
Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username field, enabling SQL Injection attacks.
Published: 2023-08-18T00:00:00.000Z
Updated: 2025-12-08T17:03:47.003Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37772 vulnerable 2026-06-08 06:08:15.964015 Details available
Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Email parameter at /shopping/login.php.
Published: 2023-08-01T00:00:00.000Z
Updated: 2024-10-17T20:22:58.960Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46110 vulnerable 2026-06-08 05:36:49.756983 Details available
Online Shopping Portal v3.1 was discovered to contain multiple time-based SQL injection vulnerabilities via the email and contactno parameters.
Published: 2022-02-18T20:10:04.000Z
Updated: 2024-08-04T05:02:10.914Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-37807 vulnerable 2026-06-08 05:32:54.771628 Details available
An SQL Injection vulneraility exists in https://phpgurukul.com Online Shopping Portal 3.1 via the email parameter on the /check_availability.php endpoint that serves as a checker whether a new user's email is already exist within the database.
Published: 2021-10-27T16:06:21.000Z
Updated: 2024-08-04T01:30:08.445Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.