CVE Feed

    Dashboard / CVE / CVE-2025-26156

    CVE-2025-26156

    A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbitrary code via orderid POST request parameter.

    Published:Feb 14, 2025
    Last Modified:Apr 2, 2025
    EPS:Feb 14, 2025
    EPSS Score:0.00397
    CVSS Score:8.8

    Affected Products

    Vendor
    Phpgurukul
    Product
    Online Shopping Portal Project

    Exploits

    https://github.com/rtnthakur/CVE/blob/main/PHPGurukul/README.mdhttps://github.com/rtnthakur/CVE/blob/main/PHPGurukul/README.md

    Related CVEs

    CVE-2026-5641 (CVSS 2.1) — A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown…
    CVE-2026-5640 (CVSS 2.1) — A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an un…
    CVE-2026-5639 (CVSS 2.1) — A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unknown function of the…
    CVE-2026-5636 (CVSS 2.1) — A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part …
    CVE-2026-5635 (CVSS 2.1) — A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. Affected by this issue i…
    CVE-2026-5606 (CVSS 5.3) — A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. The affected element is …
    CVE-2026-5583 (CVSS 2.1) — A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an u…
    CVE-2026-5560 (CVSS 2.1) — A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown…
    CVE-2026-5558 (CVSS 2.1) — A flaw has been found in PHPGurukul PHPGurukul Online Shopping Portal Project up to 2.1. Impacted is an unknow…
    CVE-2026-5552 (CVSS 2.1) — A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unkno…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High