CVE-2026-5583 | PHPGurukul Online Shopping Portal Project 2.1 Parameter /my-profile.php fullname sql injection

A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.1 and classified as critical. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection.

This vulnerability is traded as CVE-2026-5583. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.