Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.1
CVE-2026-5635: PHPGurukul Online Shopping Portal Project 2.1: Remote SQL Injection Risk in Category View
CVE-2026-5635 · published 7 months ago
Summary
A security weakness in the PHPGurukul online shopping site's category view feature allows an attacker to potentially access sensitive data. This weakness can be exploited remotely, and exploits are now publicly available. Update the site to fix this issue to protect your customers' information.
Original advisory text
A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. Affected by this issue is some unknown functionality of the file /categorywise-products.php of the component Pa...
A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. Affected by this issue is some unknown functionality of the file /categorywise-products.php of the component Parameter Handler. The manipulation of the argument cid results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
2.1
Low
Type
CWE-74Injection
CWE-89SQL Injection
Timeline
Published6 Apr 2026
Updated3 Nov 2026
First seen6 Apr 2026
Sources
CVE-2026-5635 · NVD
Track software like this
Free during beta