Online Shopping Portal Project
Approved changes feed: RSS · Atom
cpe:2.3:a:phpgurukul:online_shopping_portal_project:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Phpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d) |
|---|---|
| Product | Online Shopping Portal Project (e489fca9-c08b-5bc5-8bf7-5d5aca1ac6c0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5641 |
vulnerable | 2026-06-08 08:07:03.938112 |
PHPGurukul Online Shopping Portal Project Parameter update-image1.php sql injection
MEDIUM (6.3)
A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /admin/update-image1.php of the component Parameter Handler. The manipulation of the argument filename results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.
Published: 2026-04-06T09:15:11.825Z
Updated: 2026-04-06T14:49:24.340Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5640 |
vulnerable | 2026-06-08 08:07:03.937812 |
PHPGurukul Online Shopping Portal Project Parameter update-image2.php sql injection
MEDIUM (6.3)
A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /admin/update-image2.php of the component Parameter Handler. The manipulation of the argument filename leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-04-06T09:00:17.340Z
Updated: 2026-04-06T14:53:48.116Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5639 |
vulnerable | 2026-06-08 08:07:03.937418 |
PHPGurukul Online Shopping Portal Project Parameter update-image3.php sql injection
MEDIUM (6.3)
A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unknown function of the file /admin/update-image3.php of the component Parameter Handler. Executing a manipulation of the argument filename can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.
Published: 2026-04-06T08:45:11.147Z
Updated: 2026-04-07T03:04:46.001Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5636 |
vulnerable | 2026-06-08 08:07:03.932346 |
PHPGurukul Online Shopping Portal Project Parameter cancelorder.php sql injection
MEDIUM (6.3)
A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /cancelorder.php of the component Parameter Handler. This manipulation of the argument oid causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-04-06T08:00:15.574Z
Updated: 2026-04-06T14:49:30.699Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5635 |
vulnerable | 2026-06-08 08:07:03.931966 |
PHPGurukul Online Shopping Portal Project Parameter categorywise-products.php sql injection
MEDIUM (6.3)
A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. Affected by this issue is some unknown functionality of the file /categorywise-products.php of the component Parameter Handler. The manipulation of the argument cid results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-04-06T07:45:10.545Z
Updated: 2026-04-06T14:54:55.270Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5606 |
vulnerable | 2026-06-08 08:07:03.891769 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5583 |
vulnerable | 2026-06-08 08:07:03.864924 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5560 |
vulnerable | 2026-06-08 08:07:03.834250 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5552 |
vulnerable | 2026-06-08 08:07:03.827132 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9013 |
vulnerable | 2026-06-08 07:45:21.585976 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9012 |
vulnerable | 2026-06-08 07:45:21.585481 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9011 |
vulnerable | 2026-06-08 07:45:21.584298 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5367 |
vulnerable | 2026-06-08 07:35:24.787583 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.