Vulnerabilidades do Phpgurukul Online Shopping Portal
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Phpgurukul Online Shopping Portal: 7 registro(s), com versões afetadas e correções.cpe:2.3:a:phpgurukul:online_shopping_portal
CVE-2025-65647
Média · 4.3
CWE-639 25/11/2025
Authorization Bypass Through User-Controlled Key (IDOR) em Phpgurukul Online Shopping Portal
Insecure Direct Object Reference (IDOR) in the Track order function in PHPGURUKUL Online Shopping Portal 2.1 allows information disclosure via the oid parameter.
CVE-2024-44664
Média · 6.5
CWE-89 17/11/2025
SQL Injection em Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php.
CVE-2024-44661
Média · 5.4
CWE-79 17/11/2025
Cross-site Scripting (XSS) em Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting (XSS) via the quantity parameter in my-cart.php.
CVE-2024-44659
Crítica · 9.8
CWE-89 17/11/2025
SQL Injection em Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.
CVE-2024-44663
Média · 6.5
CWE-89 17/11/2025
SQL Injection em Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php.
CVE-2024-44662
Média · 6.5
CWE-89 17/11/2025
SQL Injection em Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page.
CVE-2024-44660
Média · 6.5
CWE-89 17/11/2025
SQL Injection em Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php.