CVE-2026-5636 in Online Shopping Portal Projectthông tin

Tóm tắt

Bởi MITRE • 06/04/2026

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /cancelorder.php of the component Parameter Handler. This manipulation of the argument oid causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

chịu trách nhiệm

VulDB

Tiết lộ

06/04/2026

Kiểm duyệt

được chấp nhận

Khai thác

Tải xuống

EPSS

0.00246

KEV

không

Các hoạt động

rất thấp

Nguồn

Do you want to use VulDB in your project?

Use the official API to access entries easily!