Online Shopping Portal Project vulnerabilities
5 known vulnerabilities in Online Shopping Portal Project from PHPGurukul. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Online Shopping Portal Project: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.0. This vulnerability affects unknown code of the file /shopping/password-recovery.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated r
- 9.8 Critical severity
Online Shopping Portal Project: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in PHPGurukul Online Shopping Portal Project 2.0. This affects an unknown part of the file shopping/bill-ship-addresses.php. The manipulation of the argument billingpincode leads to sql injection. It is possible to initiate the a
- 9.8 Critical severity
Online Shopping Portal Project: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in PHPGurukul Online Shopping Portal Project 2.0. Affected by this issue is some unknown functionality of the file /shopping/signup.php. The manipulation of the argument emailid leads to sql injection. The attack may be launched
- 9.8 Critical severity
Online Shopping Portal Project: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in PHPGurukul Online Shopping Portal Project 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument Product leads to sql injection. The attack can be
- 8.8 High severity
Online Shopping Portal Project: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbitrary code via orderid POST request parameter.