CVE-2026-5552: PHPGurukul Online Shopping Portal Project Parameter sub-category.php sql injection
A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5552?
The severity of CVE-2026-5552 is rated as medium with a score of 5.3.
How do I fix CVE-2026-5552?
To fix CVE-2026-5552, validate and sanitize user inputs to prevent SQL injection in the /sub-category.php file.
What type of vulnerability is CVE-2026-5552?
CVE-2026-5552 is identified as an SQL injection vulnerability affecting the PHPGurukul Online Shopping Portal Project.
Can CVE-2026-5552 be exploited remotely?
Yes, CVE-2026-5552 can be remotely exploited due to the nature of the SQL injection flaw.
What component of PHPGurukul is affected by CVE-2026-5552?
CVE-2026-5552 affects the Parameter Handler component in the /sub-category.php file of the PHPGurukul Online Shopping Portal Project.