PHPGurukul Online Shopping Portal Project vulnerabilities

A SQL injection vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1 within the file /admin/update-image1.php. Manipulation of the filename argument results in SQL injection. The attack may be performed remotely, and the exploit has been made public.

SQL Injection vulnerability in PHPGurukul Online Shopping Portal Project 2.1. Unknown part of /cancelorder.php in Parameter Handler allows manipulation of oid argument, leading to SQL injection. Remote attack possible. Exploit published.

SQL Injection vulnerability in PHPGurukul Online Shopping Portal Project 2.1. Unknown functionality in /categorywise-products.php in Parameter Handler allows manipulation of cid argument, leading to SQL injection. Remote attack possible. Exploit published.

SQL Injection vulnerability in PHPGurukul Online Shopping Portal Project 2.1. Unknown part of /my-profile.php in Parameter Handler allows manipulation of fullname argument, leading to SQL injection. Remote attack possible. Exploit published.

In PHPGurukul Online Shopping Portal Project up to version 2.1, a SQL injection vulnerability was found in the file /pending-orders.php via manipulation of the ID argument. The attack can be performed remotely and the exploit has been published.