CVE-2026-5636: PHPGurukul Online Shopping Portal Project Parameter cancelorder.php sql injection
A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /cancelorder.php of the component Parameter Handler. This manipulation of the argument oid causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5636?
CVE-2026-5636 is classified as a high severity SQL injection vulnerability in PHPGurukul Online Shopping Portal Project version 2.1.
How do I fix CVE-2026-5636?
To fix CVE-2026-5636, validate and sanitize all user input in the /cancelorder.php file to prevent SQL injection.
What is vulnerable in CVE-2026-5636?
CVE-2026-5636 affects the /cancelorder.php file in PHPGurukul Online Shopping Portal Project version 2.1 due to inadequate input handling.
Can CVE-2026-5636 lead to data loss?
Yes, CVE-2026-5636 can potentially lead to data loss or unauthorized access to sensitive information through SQL injection.
Is there a patch available for CVE-2026-5636?
Currently, there is no official patch for CVE-2026-5636, but it is advised to update the software once a fix is released.