OS
Product
Online Shopping Portal
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 5Medium 20Low 0
Watch
Add Online Shopping Portal to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-44659 | 9.8 | Nov 17 | PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php Affected: 2.0 |
| CVE-2025-5367 | 9.8 | May 31 | PHPGurukul Online Shopping Portal Project category.php sql injection Affected: 1.0 |
| CVE-2025-5079 | 9.8 | May 22 | PHPGurukul/Campcodes Online Shopping Portal updateorder.php sql injection Affected: 1.0 |
| CVE-2025-5078 | 9.8 | May 22 | PHPGurukul/Campcodes Online Shopping Portal subcategory.php sql injection Affected: 1.0 |
| CVE-2024-9326 | 9.8 | Sep 29 | PHPGurukul Online Shopping Portal Admin Panel index.php sql injection Affected: 2.0 |
| CVE-2021-46110 | 9.8 | Feb 18 | Online Shopping Portal v3.1 was discovered to contain multiple time-based SQL injection vulnerabilities via the email and contactno parameters Affected: 3.1 |
| CVE-2025-57148 | 9.1 | Sep 3 | phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of extension validation Affected: 2.0 |
| CVE-2023-3605 | 9.1 | Jul 10 | A vulnerability was found in PHPGurukul Online Shopping Portal 1.0 Affected: 1.0 |
| CVE-2025-1855 | 8.8 | Mar 3 | PHPGurukul Online Shopping Portal product-details.php sql injection Affected: 2.1 |
| CVE-2023-38890 | 8.8 | Aug 18 | Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data… Affected: 3.1 |
| CVE-2023-37772 | 8.8 | Aug 1 | Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Email parameter at /shopping/login.php Affected: 3.1 |
| CVE-2025-1578 | 7.5 | Feb 23 | PHPGurukul/Campcodes Online Shopping Portal search-result.php sql injection Affected: 2.1 |
| CVE-2021-37807 | 7.5 | Oct 27 | An SQL Injection vulneraility exists in https://phpgurukul.com Online Shopping Portal 3.1 via the email parameter on the /check_availability.php endpoint that serves as a checker… Affected: 3.1 |
| CVE-2024-44660 | 6.5 | Nov 17 | PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php Affected: 2.0 |
| CVE-2024-44662 | 6.5 | Nov 17 | PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page Affected: 2.0 |
| CVE-2024-44663 | 6.5 | Nov 17 | PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php Affected: 2.0 |
| CVE-2024-44664 | 6.5 | Nov 17 | PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php Affected: 2.0 |
| CVE-2025-52074 | 6.1 | Sep 12 | PHPGURUKUL Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) due to lack of input sanitization in the quantity parameter when adding a product to the cart Affected: 2.1 |
| CVE-2024-10757 | 6.1 | Nov 4 | PHPGurukul Online Shopping Portal js_data.php cross site scripting Affected: 2.0 |
| CVE-2024-10756 | 6.1 | Nov 4 | PHPGurukul Online Shopping Portal html_table.php cross site scripting Affected: 2.0 |
| CVE-2024-10755 | 6.1 | Nov 4 | PHPGurukul Online Shopping Portal empty_table.php cross site scripting Affected: 2.0 |
| CVE-2024-10754 | 6.1 | Nov 4 | PHPGurukul Online Shopping Portal dymanic_table.php cross site scripting Affected: 2.0 |
| CVE-2024-10747 | 6.1 | Nov 4 | PHPGurukul Online Shopping Portal dom_data_th.php cross site scripting Affected: 2.0 |
| CVE-2024-10746 | 6.1 | Nov 3 | PHPGurukul Online Shopping Portal dom_data.php cross site scripting Affected: 2.0 |
| CVE-2024-10745 | 6.1 | Nov 3 | PHPGurukul Online Shopping Portal deferred_table.php cross site scripting Affected: 2.0 |
| CVE-2024-10744 | 6.1 | Nov 3 | PHPGurukul Online Shopping Portal complex_header_2.php cross site scripting Affected: 2.0 |
| CVE-2024-10743 | 6.1 | Nov 3 | PHPGurukul Online Shopping Portal editable_ajax.php cross site scripting Affected: 2.0 |
| CVE-2024-39090 | 6.1 | Jul 18 | The PHPGurukul Online Shopping Portal Project version 2.0 contains a vulnerability that allows Cross-Site Request Forgery (CSRF) to lead to Stored Cross-Site Scripting (XSS) Affected: 2.0 |
| CVE-2024-44661 | 5.4 | Nov 17 | PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting (XSS) via the quantity parameter in my-cart.php Affected: 2.0 |
| CVE-2025-57576 | 5.4 | Sep 4 | PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) in /admin/updateorder.php Affected: 2.1 |
| CVE-2024-10768 | 5.4 | Nov 4 | PHPGurukul Online Shopping Portal two_tables.php cross site scripting Affected: 2.0 |
| CVE-2024-10753 | 5.4 | Nov 4 | PHPGurukul Online Shopping Portal dom_data_two_headers.php cross site scripting Affected: 2.0 |
| CVE-2025-65647 | 4.3 | Nov 25 | Insecure Direct Object Reference (IDOR) in the Track order function in PHPGURUKUL Online Shopping Portal 2.1 allows information disclosure via the oid parameter Affected: 2.1 |
Showing 33