CVE-2025-26156 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbitr…
High CVSS: 8.8

CVE-2025-26156

A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbitrary code via orderid POST request parameter.
Vendor
Phpgurukul
Product
Online Shopping Portal Project
CWE
CWE-89
Yayın Tarihi
2025-02-14 17:15:22
Güncelleme
2025-04-02 18:49:33
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-89 Online Shopping Portal Project HIGH Phpgurukul 2025

Referanslar

https://github.com/rtnthakur/CVE/blob/main/PHPGurukul/README.md https://github.com/rtnthakur/CVE/blob/main/PHPGurukul/README.md