CVE-2024-9326: medium-severity vulnerability in PHPGurukul Online Shopping Portal
PHPGurukul Online Shopping Portal Admin Panel index.php sql injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 1.4%
A vulnerability classified as critical was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /shopping/admin/index.php of the component Admin Panel. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
PHPGurukul · Online Shopping PortalRelated CVEs — PHPGurukul Online Shopping Portal
In the same product, most dangerous first.
CVE-2023-3605MEDIUMPHPGurukul Online Shopping Portal Registration Page excessive authenticationEPSS 0.7%CVE-2025-5078MEDIUMPHPGurukul/Campcodes Online Shopping Portal subcategory.php sql injectionEPSS 0.6%CVE-2025-5079MEDIUMPHPGurukul/Campcodes Online Shopping Portal updateorder.php sql injectionEPSS 0.6%CVE-2025-1855MEDIUMPHPGurukul Online Shopping Portal product-details.php sql injectionEPSS 0.5%CVE-2024-10757MEDIUMPHPGurukul Online Shopping Portal js_data.php cross site scriptingEPSS 0.5%CVE-2024-10756MEDIUMPHPGurukul Online Shopping Portal html_table.php cross site scriptingEPSS 0.4%