ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2025-26156
8.8высокая

CVE-2025-26156

Описание

A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbitrary code via orderid POST request parameter.

Затрагиваемое ПО
Phpgurukul Online shopping portal project
CVSS
Балл8.8 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Источники
https://github.com/rtnthakur/CVE/blob/main/PHPGurukul/README.mdhttps://github.com/rtnthakur/CVE/blob/main/PHPGurukul/README.md