A vulnerability identified as critical has been detected in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /admin/update-image2.php of the component Parameter Handler. The manipulation of the argument filename leads to sql injection.
This vulnerability is uniquely identified as CVE-2026-5640. The attack is possible to be carried out remotely. Moreover, an exploit is present.
