5.3
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Description
A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. Affected by this issue is some unknown functionality of the file /categorywise-products.php of the component Parameter Handler. The manipulation of the argument cid results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
Basic Information
ID
CVE-2026-5635
Source
VulDB
Published
Apr 6, 2026 at 07:45
Modified
Apr 6, 2026 at 14:54
Affected Product
Vendor
PHPGurukul
Product
Online Shopping Portal Project
Version
2.1
Affected Versions
PHPGurukul Online Shopping Portal Project 2.1