Phpgurukul Online Shopping Portal Project vulnerabilities

14 CVEs affecting Phpgurukul Online Shopping Portal Project, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-5641, published 2026-04-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-26156, published 2025-02-14. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbitrary code via orderid POST request…
CVE-2025-9013, published 2025-08-15. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.0. This vulnerability affects unknown code of the file /shopping/password-recovery.php. The manipulation of the argument…
CVE-2025-9012, published 2025-08-15. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was identified in PHPGurukul Online Shopping Portal Project 2.0. This affects an unknown part of the file shopping/bill-ship-addresses.php. The manipulation of the argument…
CVE-2025-9011, published 2025-08-15. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was determined in PHPGurukul Online Shopping Portal Project 2.0. Affected by this issue is some unknown functionality of the file /shopping/signup.php. The manipulation of the…
CVE-2026-5641, published 2026-04-06. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /admin/update-image1.php of the component Parameter Handler. The…
CVE-2026-5640, published 2026-04-06. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /admin/update-image2.php of the component Parameter Handler.…
CVE-2026-5639, published 2026-04-06. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unknown function of the file /admin/update-image3.php of the component Parameter Handler. Executing a…
CVE-2026-5636, published 2026-04-06. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /cancelorder.php of the component Parameter Handler. This manipulation of the…
CVE-2026-5635, published 2026-04-06. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. Affected by this issue is some unknown functionality of the file /categorywise-products.php of the component…
CVE-2026-5606, published 2026-04-06. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /order-details.php of the component Parameter Handler.…

Latest

CVE-2026-5583, published 2026-04-05. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The…
CVE-2026-5560, published 2026-04-05. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /payment-method.php of the component Parameter Handler. Performing…
CVE-2026-5552, published 2026-04-05. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This…
CVE-2025-61096, published 2025-10-02. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. PHPGurukul Online Shopping Portal Project v2.1 is vulnerable to SQL Injection in /shopping/login.php via the fullname parameter.