Phpgurukul Online Shopping Portal Project — known CVE vulnerabilities

Every CVE whose affected-product data names Phpgurukul Online Shopping Portal Project, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2025-26156 — CVSS 8.8 (high): A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote…
• CVE-2025-9011 — CVSS 7.3 (high): A vulnerability was determined in PHPGurukul Online Shopping Portal Project 2.0. Affected by this issue is some unknown functionality of…
• CVE-2025-9012 — CVSS 7.3 (high): A vulnerability was identified in PHPGurukul Online Shopping Portal Project 2.0. This affects an unknown part of the file…
• CVE-2025-9013 — CVSS 7.3 (high): A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.0. This vulnerability affects unknown code of the file…
• CVE-2025-61096 — CVSS 6.5 (medium): PHPGurukul Online Shopping Portal Project v2.1 is vulnerable to SQL Injection in /shopping/login.php via the fullname parameter.