CVE-2025-65647: Medium severity Phpgurukul Online Shopping Portal vulnerability
Published Nov 25, 2025
·Updated
Insecure Direct Object Reference (IDOR) in the Track order function in PHPGURUKUL Online Shopping Portal 2.1 allows information disclosure via the oid parameter.
Affected Software
2 affected components
Phpgurukul Online Shopping Portal
Phpgurukul Online Shopping Portal=2.1
Event History
Nov 25, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-65647?
CVE-2025-65647 has been classified with a medium severity due to potential information disclosure risks.
2
How do I fix CVE-2025-65647?
To mitigate CVE-2025-65647, implement proper access controls and avoid direct object references in the Track order function.
3
What systems are affected by CVE-2025-65647?
CVE-2025-65647 affects PHPGURUKUL Online Shopping Portal version 2.1 specifically.
4
What type of vulnerability is CVE-2025-65647?
CVE-2025-65647 is classified as an Insecure Direct Object Reference (IDOR) vulnerability.
5
What are the consequences of CVE-2025-65647?
The consequences of CVE-2025-65647 include potential unauthorized access to sensitive user order data.