CVE-2025-1855 | PHPGurukul Online Shopping Portal 2.1 /product-details.php quality/price/value/name/summary/review sql injection

A vulnerability was found in PHPGurukul Online Shopping Portal 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /product-details.php. The manipulation of the argument quality/price/value/name/summary/review leads to sql injection.

This vulnerability is known as CVE-2025-1855. The attack can be launched remotely. Furthermore, there is an exploit available.