A vulnerability labeled as critical has been found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /admin/update-image1.php of the component Parameter Handler. The manipulation of the argument filename results in sql injection.
This vulnerability was named CVE-2026-5641. The attack may be performed from remote. In addition, an exploit is available.
