SQL Injection Vulnerability in PHPGurukul Online Shopping Portal
CVE-2025-61096

6.5MEDIUM

Key Information:

Vendor

PHPGurukul
Status
Online Shopping Portal
Vendor
CVE Published:
2 October 2025

What is CVE-2025-61096?

The PHPGurukul Online Shopping Portal Project v2.1 is susceptible to an SQL injection attack through the 'fullname' parameter in the /shopping/login.php file. This vulnerability could allow an attacker to manipulate SQL queries, potentially leading to unauthorized access to sensitive user information or data breaches.

References

https://www.linkedin.com/in/shuvo-ahmed-sanin/
https://github.com/sanin-s1r3n/CVE-Research/blob/main/CVE...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.