Phpgurukul Online_shopping_portal 2.1
Approved changes feed: RSS · Atom
cpe:2.3:a:phpgurukul:online_shopping_portal:2.1:*:*:*:*:*:*:*
part: a version: 2.1 update: *
| Vendor | Phpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d) |
|---|---|
| Product | Online Shopping Portal (fc21f4c1-dbf8-5eb0-8284-b3fecb444d34) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-65647 |
vulnerable | 2026-06-08 07:39:20.937610 |
Details available
Insecure Direct Object Reference (IDOR) in the Track order function in PHPGURUKUL Online Shopping Portal 2.1 allows information disclosure via the oid parameter.
Published: 2025-11-25T00:00:00.000Z
Updated: 2025-11-25T19:56:55.929Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57576 |
vulnerable | 2026-06-08 07:33:15.952923 |
Details available
PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) in /admin/updateorder.php.
Published: 2025-09-04T00:00:00.000Z
Updated: 2025-09-04T20:05:43.337Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52074 |
vulnerable | 2026-06-08 07:31:11.359833 |
Details available
PHPGURUKUL Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) due to lack of input sanitization in the quantity parameter when adding a product to the cart.
Published: 2025-09-12T00:00:00.000Z
Updated: 2025-09-12T17:09:13.360Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1855 |
vulnerable | 2026-06-08 07:08:38.352105 |
PHPGurukul Online Shopping Portal product-details.php sql injection
MEDIUM (6.3)
A vulnerability was found in PHPGurukul Online Shopping Portal 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /product-details.php. The manipulation of the argument quality/price/value/name/summary/review leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-03T07:00:08.159Z
Updated: 2025-03-03T15:51:37.149Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1578 |
vulnerable | 2026-06-08 07:08:37.330119 |
PHPGurukul/Campcodes Online Shopping Portal search-result.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in PHPGurukul/Campcodes Online Shopping Portal 2.1. This affects an unknown part of the file /search-result.php. The manipulation of the argument Product leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-02-23T08:00:13.408Z
Updated: 2025-05-20T14:35:08.687Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.