CVE-2026-5606 — PHPGurukul Online Shopping Portal Project Parameter order-details.php sql injection
A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /order-details.php of the component…
Published: 2026-04-06 · CVSS: 5.3 · CVSS 4.0
A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /order-details.php of the component Parameter Handler. The manipulation of the argument orderid results in sql injection. It is possible to launch the attack remotely.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7