PT-2026-30590 · Phpgurukul · Online Shopping Portal Project

Published 2026-04-06 · Updated 2026-04-06 · CVE-2026-5641

Mitre

CVSS v3.1

6.3

Medium

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /admin/update-image1.php of the component Parameter Handler. The manipulation of the argument filename results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-5641

Affected Products

Online Shopping Portal Project

References · 9

• 🔥 https://github.com/f1rstb100d/CVE/issues/19 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5641 · Security Note
• https://twitter.com/infoflowcloud/status/2041096229514297566 · Twitter Post
• https://vuldb.com/submit/785993 · Note
• https://twitter.com/VulmonFeeds/status/2041110130872181080 · Twitter Post
• https://vuldb.com/vuln/355429/cti · Note
• https://vuldb.com/vuln/355429 · Note
• https://twitter.com/CVEnew/status/2041094982115737911 · Twitter Post
• https://phpgurukul.com · Note