UNKNOWNCVE-2026-5606
PHPGurukul Online Shopping Portal Project Parameter order-details.php sql injection
Platform
php
Component
phpgurukul-online-shopping-portal-project
A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /order-details.php of the component Parameter Handler. The manipulation of the argument orderid results in sql injection. It is possible to launch the attack remotely.
How to fix
Actualice el proyecto PHPGurukul Online Shopping Portal Project a una versión corregida. Verifique y sanee todas las entradas de usuario, especialmente el parámetro 'orderid', para prevenir inyecciones SQL. Implemente consultas parametrizadas o procedimientos almacenados para interactuar con la base de datos de forma segura.
Monitor your dependencies automatically
Get notified when new vulnerabilities affect your projects. Free forever.
Start free