CVE-2025-9013 | PHPGurukul Online Shopping Portal Project 2.0 password-recovery.php emailid sql injection

A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.0 and classified as critical. This vulnerability affects unknown code of the file /shopping/password-recovery.php. The manipulation of the argument emailid leads to sql injection.

This vulnerability was named CVE-2025-9013. The attack can be initiated remotely. Furthermore, there is an exploit available.