CVE-2026-5635: PHPGurukul Online Shopping Portal Project Parameter categorywise-products.php sql injection
A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. Affected by this issue is some unknown functionality of the file /categorywise-products.php of the component Parameter Handler. The manipulation of the argument cid results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5635?
CVE-2026-5635 has a high severity due to the potential for SQL injection in the online shopping portal.
How do I fix CVE-2026-5635?
To fix CVE-2026-5635, sanitize and validate all user inputs in the categorywise-products.php file to prevent SQL injection.
What software is affected by CVE-2026-5635?
CVE-2026-5635 affects PHPGurukul Online Shopping Portal Project version 2.1.
What are the potential impacts of CVE-2026-5635?
The potential impacts of CVE-2026-5635 include unauthorized data access and manipulation of the database.
How can I determine if my system is vulnerable to CVE-2026-5635?
You can verify if your system is vulnerable to CVE-2026-5635 by checking if you are running PHPGurukul Online Shopping Portal Project version 2.1 and analyzing user input handling.