CVE-2025-26156 | PHPGurukul Online Shopping Portal 2.1 POST Request Parameter track-orders.php orderid sql injection

A vulnerability has been found in PHPGurukul Online Shopping Portal 2.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /shopping/track-orders.php of the component POST Request Parameter Handler. The manipulation of the argument orderid leads to sql injection.

This vulnerability is known as CVE-2025-26156. The attack can be launched remotely. There is no exploit available.