CVE-2025-9013: PHPGurukul Online Shopping Portal Project password-recovery.php sql injection
A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.0. This vulnerability affects unknown code of the file /shopping/password-recovery.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9013?
CVE-2025-9013 has a medium severity level due to its potential for SQL injection attacks.
How do I fix CVE-2025-9013?
To fix CVE-2025-9013, sanitize and validate the input for the emailid parameter in the /shopping/password-recovery.php file.
Can CVE-2025-9013 be exploited remotely?
Yes, CVE-2025-9013 can be exploited remotely by attacking the affected input field.
Which software is affected by CVE-2025-9013?
CVE-2025-9013 affects the PHPGurukul Online Shopping Portal Project, version 2.0.
What kind of attack does CVE-2025-9013 facilitate?
CVE-2025-9013 facilitates SQL injection attacks through the manipulation of the emailid argument.