CVE-2025-61096: SQL Injection
Published Oct 2, 2025
·Updated
PHPGurukul Online Shopping Portal Project v2.1 is vulnerable to SQL Injection in /shopping/login.php via the fullname parameter.
Affected Software
2 affected components
Phpgurukul Online Shopping Portal
Phpgurukul Online Shopping Portal Project=2.1
Event History
Oct 2, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-61096?
CVE-2025-61096 is classified as a high-severity vulnerability due to its potential for SQL Injection attacks.
2
How do I fix CVE-2025-61096?
To fix CVE-2025-61096, sanitize and validate user inputs, particularly the fullname parameter in the login process.
3
What software is affected by CVE-2025-61096?
CVE-2025-61096 affects PHPGurukul Online Shopping Portal Project version 2.1.
4
What kind of attack can CVE-2025-61096 be exploited for?
CVE-2025-61096 can be exploited for SQL Injection attacks, allowing attackers to manipulate database queries.
5
Is user data at risk due to CVE-2025-61096?
Yes, user data can be at risk due to CVE-2025-61096, as SQL Injection can lead to unauthorized access or data breaches.