medium4.3
CVE-2025-65647
Insecure Direct Object Reference (IDOR) in the Track order function in PHPGURUKUL Online Shopping Portal 2.1 allows information disclosure via the oid paramete…
Impact
Insecure Direct Object Reference (IDOR) in the Track order function in PHPGURUKUL Online Shopping Portal 2.1 allows information disclosure via the oid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpgurukul | Online Shopping Portal | Version 2.1 |