Approved changes feed: RSS · Atom

cpe:2.3:a:phpgurukul:online_shopping_portal:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

VendorPhpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d)
ProductOnline Shopping Portal (fc21f4c1-dbf8-5eb0-8284-b3fecb444d34)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-57148 vulnerable 2026-06-08 07:33:15.803638 Details available
phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of extension validation.
Published: 2025-09-03T00:00:00.000Z
Updated: 2026-04-06T14:07:56.817Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9326 vulnerable 2026-06-08 07:00:27.131269 PHPGurukul Online Shopping Portal Admin Panel index.php sql injection
HIGH (7.3)
A vulnerability classified as critical was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /shopping/admin/index.php of the component Admin Panel. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-09-29T08:00:09.100Z
Updated: 2024-09-30T19:38:58.076Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44664 vulnerable 2026-06-08 06:45:54.110182 Details available
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php.
Published: 2025-11-17T00:00:00.000Z
Updated: 2025-11-17T20:04:27.728Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44663 vulnerable 2026-06-08 06:45:54.109956 Details available
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php.
Published: 2025-11-17T00:00:00.000Z
Updated: 2025-11-17T20:30:59.723Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44662 vulnerable 2026-06-08 06:45:54.109599 Details available
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page.
Published: 2025-11-17T00:00:00.000Z
Updated: 2025-11-17T20:40:23.622Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44661 vulnerable 2026-06-08 06:45:54.109276 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44660 vulnerable 2026-06-08 06:45:54.108831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44659 vulnerable 2026-06-08 06:45:54.108324 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39090 vulnerable 2026-06-08 06:41:48.725857 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10768 vulnerable 2026-06-08 06:23:47.483888 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10757 vulnerable 2026-06-08 06:23:47.447889 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10756 vulnerable 2026-06-08 06:23:47.447241 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10755 vulnerable 2026-06-08 06:23:47.446541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10754 vulnerable 2026-06-08 06:23:47.445790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10753 vulnerable 2026-06-08 06:23:47.445119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10747 vulnerable 2026-06-08 06:23:47.427216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10746 vulnerable 2026-06-08 06:23:47.423945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10745 vulnerable 2026-06-08 06:23:47.423322 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10744 vulnerable 2026-06-08 06:23:47.422627 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10743 vulnerable 2026-06-08 06:23:47.420987 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.