Approved changes feed: RSS · Atom

cpe:2.3:a:phpgurukul:online_shopping_portal:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorPhpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d)
ProductOnline Shopping Portal (fc21f4c1-dbf8-5eb0-8284-b3fecb444d34)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5367 vulnerable 2026-06-08 07:35:24.787767 PHPGurukul Online Shopping Portal Project category.php sql injection
HIGH (7.3)
A vulnerability was found in PHPGurukul Online Shopping Portal Project 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument Product leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-31T01:31:05.682Z
Updated: 2025-06-02T15:50:27.846Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5079 vulnerable 2026-06-08 07:35:24.109565 PHPGurukul/Campcodes Online Shopping Portal updateorder.php sql injection
HIGH (7.3)
A flaw has been found in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/updateorder.php. Executing manipulation of the argument remark can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.
Published: 2025-05-22T14:31:04.626Z
Updated: 2025-09-02T12:54:17.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5078 vulnerable 2026-06-08 07:35:24.108868 PHPGurukul/Campcodes Online Shopping Portal subcategory.php sql injection
HIGH (7.3)
A vulnerability was detected in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected is an unknown function of the file /admin/subcategory.php. Performing manipulation of the argument Category results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Published: 2025-05-22T14:00:14.795Z
Updated: 2025-09-02T12:55:01.660Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3605 vulnerable 2026-06-08 06:09:39.998839 PHPGurukul Online Shopping Portal Registration Page excessive authentication
MEDIUM (6.5)
A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Registration Page. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-233467.
Published: 2023-07-10T20:00:04.915Z
Updated: 2024-10-15T18:33:35.103Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.