← All advisories

Medium severity6.5NVD Advisory· Published Oct 2, 2025· Updated Jun 17, 2026

CVE-2025-61096

CVE-2025-61096

Description

PHPGurukul Online Shopping Portal Project v2.1 is vulnerable to SQL Injection in /shopping/login.php via the fullname parameter.

Affected products

3

Phpgurukul/Online Shopping Portal3 versions
cpe:2.3:a:phpgurukul:online_shopping_portal_project:2.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:phpgurukul:online_shopping_portal_project:2.1:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 2.1

Patches

Vulnerability mechanics

References

2

github.com/sanin-s1r3n/CVE-Research/blob/main/CVE-2025-61096nvdExploitThird Party Advisory
www.linkedin.com/in/shuvo-ahmed-sanin/nvdNot Applicable

News mentions

0

No linked articles in our index yet.