Login Request a demo
OS
Product
Online Shopping Portal
by PHPGurukul · last CVE Nov 25, 2025
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities33In the news0Timeline
Severity mix
Critical 8High 5Medium 20Low 0
Severity
All severities33Critical8High5Medium20Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Online Shopping Portal to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-44660
6.5
0%
Nov 17
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php
Affected: 2.0
CVE-2024-44662
6.5
0%
Nov 17
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page
Affected: 2.0
CVE-2024-44663
6.5
0%
Nov 17
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php
Affected: 2.0
CVE-2024-44664
6.5
0%
Nov 17
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php
Affected: 2.0
CVE-2025-52074
6.1
0%
Sep 12
PHPGURUKUL Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) due to lack of input sanitization in the quantity parameter when adding a product to the cart
Affected: 2.1
CVE-2024-10757
6.1
0%
Nov 4
PHPGurukul Online Shopping Portal js_data.php cross site scripting
Affected: 2.0
CVE-2024-10756
6.1
0%
Nov 4
PHPGurukul Online Shopping Portal html_table.php cross site scripting
Affected: 2.0
CVE-2024-10755
6.1
0%
Nov 4
PHPGurukul Online Shopping Portal empty_table.php cross site scripting
Affected: 2.0
CVE-2024-10754
6.1
0%
Nov 4
PHPGurukul Online Shopping Portal dymanic_table.php cross site scripting
Affected: 2.0
CVE-2024-10747
6.1
0%
Nov 4
PHPGurukul Online Shopping Portal dom_data_th.php cross site scripting
Affected: 2.0
CVE-2024-10746
6.1
0%
Nov 3
PHPGurukul Online Shopping Portal dom_data.php cross site scripting
Affected: 2.0
CVE-2024-10745
6.1
0%
Nov 3
PHPGurukul Online Shopping Portal deferred_table.php cross site scripting
Affected: 2.0
CVE-2024-10744
6.1
0%
Nov 3
PHPGurukul Online Shopping Portal complex_header_2.php cross site scripting
Affected: 2.0
CVE-2024-10743
6.1
0%
Nov 3
PHPGurukul Online Shopping Portal editable_ajax.php cross site scripting
Affected: 2.0
CVE-2024-39090
6.1
1%
Jul 18
The PHPGurukul Online Shopping Portal Project version 2.0 contains a vulnerability that allows Cross-Site Request Forgery (CSRF) to lead to Stored Cross-Site Scripting (XSS)
Affected: 2.0
CVE-2024-44661
5.4
0%
Nov 17
PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting (XSS) via the quantity parameter in my-cart.php
Affected: 2.0
CVE-2025-57576
5.4
0%
Sep 4
PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) in /admin/updateorder.php
Affected: 2.1
CVE-2024-10768
5.4
0%
Nov 4
PHPGurukul Online Shopping Portal two_tables.php cross site scripting
Affected: 2.0
CVE-2024-10753
5.4
0%
Nov 4
PHPGurukul Online Shopping Portal dom_data_two_headers.php cross site scripting
Affected: 2.0
CVE-2025-65647
4.3
0%
Nov 25
Insecure Direct Object Reference (IDOR) in the Track order function in PHPGURUKUL Online Shopping Portal 2.1 allows information disclosure via the oid parameter
Affected: 2.1
Showing 20