CVE-2026-5636 | PHPGurukul Online Shopping Portal Project 2.1 Parameter /cancelorder.php oid sql injection

A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. It has been classified as critical. This affects an unknown part of the file /cancelorder.php of the component Parameter Handler. This manipulation of the argument oid causes sql injection.

This vulnerability appears as CVE-2026-5636. The attack may be initiated remotely. In addition, an exploit is available.