CVE-2026-5583: PHPGurukul Online Shopping Portal Project Parameter my-profile.php sql injection
A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5583?
CVE-2026-5583 is classified as a critical vulnerability due to the potential for SQL injection attacks that can compromise the database.
How do I fix CVE-2026-5583?
To fix CVE-2026-5583, ensure that user input is properly sanitized and use prepared statements for SQL queries in the my-profile.php file.
What type of vulnerability is CVE-2026-5583?
CVE-2026-5583 is an SQL injection vulnerability that allows attackers to manipulate database queries through unsanitized input.
Which version of PHPGurukul is affected by CVE-2026-5583?
CVE-2026-5583 affects version 2.1 of the PHPGurukul Online Shopping Portal Project.
What component is affected by CVE-2026-5583?
The component affected by CVE-2026-5583 is the Parameter Handler located in the my-profile.php file.