High · 8.8 CVE-2025-26156 EUVD-2025-4148GHSA-m26p-8j2h-c3gc

A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attack…

Published Feb 14, 2025 · Updated Feb 14, 2025 · Assigned by mitre

Description

A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbitrary code via orderid POST request parameter.

References

https://github.com/rtnthakur/CVE/blob/main/PHPGurukul/README.md