Back to CVE List

CVE-2026-5606

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score
6.3 / 10
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Vulnerability Description

A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /order-details.php of the component Parameter Handler. The manipulation of the argument orderid results in sql injection. It is possible to launch the attack remotely.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-74
Source
NVD

External References

Discussion (0)

Add Comment

No comments yet. Be the first!