Priority HIGH 82
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00438 · Published 2025-11-17 · No fix listed CWE-89
Priority HIGH 74
phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of extension validation.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.00474 · Published 2025-09-03 · No fix listed CWE-434
Priority HIGH 73
Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01417 · Published 2023-08-18 · No fix listed CWE-89
Priority HIGH 73
Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Email parameter at /shopping/login.php.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01078 · Published 2023-08-01 · No fix listed CWE-89
Priority HIGH 70
A vulnerability was found in PHPGurukul Online Shopping Portal Project 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00527 · Published 2025-05-31 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was detected in PHPGurukul/Campcodes Online Shopping Portal 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00603 · Published 2025-05-22 · No fix listed CWE-74
Priority HIGH 70
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00258 · Published 2025-11-17 · No fix listed CWE-89
Priority HIGH 70
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00258 · Published 2025-11-17 · No fix listed CWE-89
Priority HIGH 70
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00258 · Published 2025-11-17 · No fix listed CWE-89
Priority HIGH 70
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00258 · Published 2025-11-17 · No fix listed CWE-89
Priority HIGH 70
A vulnerability classified as critical was found in PHPGurukul Online Shopping Portal 2.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.01444 · Published 2024-09-29 · No fix listed CWE-89
Priority MEDIUM 60
PHPGURUKUL Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) due to lack of input sanitization in the quantity parameter when adding a product to the cart.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00228 · Published 2025-09-12 · No fix listed CWE-79
Priority MEDIUM 60
The PHPGurukul Online Shopping Portal Project version 2.0 contains a vulnerability that allows Cross-Site Request Forgery (CSRF) to lead to Stored Cross-Site Scripting (XSS).
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00522 · Published 2024-07-18 · No fix listed CWE-352
Priority MEDIUM 58
PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) in /admin/updateorder.php.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00209 · Published 2025-09-04 · No fix listed CWE-79
Priority MEDIUM 58
PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting (XSS) via the quantity parameter in my-cart.php.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00241 · Published 2025-11-17 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was found in PHPGurukul Online Shopping Portal 2.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00517 · Published 2025-03-03 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00412 · Published 2024-11-04 · No fix listed CWE-707
Priority MEDIUM 57
A vulnerability, which was classified as problematic, has been found in PHPGurukul Online Shopping Portal 2.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00455 · Published 2024-11-04 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00428 · Published 2024-11-04 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability classified as problematic has been found in PHPGurukul Online Shopping Portal 2.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00428 · Published 2024-11-04 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was found in PHPGurukul Online Shopping Portal 2.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00428 · Published 2024-11-04 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was found in PHPGurukul Online Shopping Portal 2.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00412 · Published 2024-11-04 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.004 · Published 2024-11-04 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability classified as problematic has been found in PHPGurukul Online Shopping Portal 2.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.004 · Published 2024-11-03 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was found in PHPGurukul Online Shopping Portal 2.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.004 · Published 2024-11-03 · No fix listed CWE-79
Load more
THREATIST.IORead the docs