high8.8
CVE-2025-26156
A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbit…
Impact
A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbitrary code via orderid POST request parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpgurukul | Online Shopping Portal Project | Version 2.1 |