Security Advisory

CVE-2025-26156

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-02-14 00:00:00

Last updated 2025-02-14 18:29:20

Assigner mitre

State PUBLISHED

Description

A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbitrary code via orderid POST request parameter.

← Browse all CVEs View on cve.org ↗