Phpgurukul Online Shopping Portal vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Phpgurukul Online Shopping Portal: 7 record(s), with affected versions and fixes.cpe:2.3:a:phpgurukul:online_shopping_portal
CVE-2025-65647
Medium · 4.3
CWE-639 Nov 25, 2025
Authorization Bypass Through User-Controlled Key (IDOR) in Phpgurukul Online Shopping Portal
Insecure Direct Object Reference (IDOR) in the Track order function in PHPGURUKUL Online Shopping Portal 2.1 allows information disclosure via the oid parameter.
CVE-2024-44664
Medium · 6.5
CWE-89 Nov 17, 2025
SQL Injection in Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php.
CVE-2024-44661
Medium · 5.4
CWE-79 Nov 17, 2025
Cross-site Scripting (XSS) in Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting (XSS) via the quantity parameter in my-cart.php.
CVE-2024-44659
Critical · 9.8
CWE-89 Nov 17, 2025
SQL Injection in Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.
CVE-2024-44663
Medium · 6.5
CWE-89 Nov 17, 2025
SQL Injection in Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php.
CVE-2024-44662
Medium · 6.5
CWE-89 Nov 17, 2025
SQL Injection in Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page.
CVE-2024-44660
Medium · 6.5
CWE-89 Nov 17, 2025
SQL Injection in Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php.