CVE-2023-37772: Phpgurukul Online Shopping Portal

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Email parameter at /shopping/login.php.

Affected products

• Phpgurukul Online Shopping Portal: version 3.1 only

Published 2023-08-01. Last modified 2026-06-17.