CVE-2026-5639 in Online Shopping Portal Projectinformación

Resumen

por MITRE • 2026-04-06

A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unknown function of the file /admin/update-image3.php of the component Parameter Handler. Executing a manipulation of the argument filename can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Responsable

VulDB

Divulgación

2026-04-06

Moderación

aceptado

Artículo

VDB-355427

CPE

listo

Explotación

Descargar

EPSS

0.00246

KEV

no

Actividades

muy bajo

Fuentes

Do you know our Splunk app?

Download it now for free!