https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-9013.htmlhttps://patchthecve.com/cve/CVE-2025-9013.htmlWed, 17 Jun 2026 10:08:09 +0000HIGH 7.3: A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.0. This vulnerability affects unknown code of the file /shopping/password-recovery.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed https://patchthecve.com/cve/CVE-2025-9012.htmlhttps://patchthecve.com/cve/CVE-2025-9012.htmlWed, 17 Jun 2026 10:08:09 +0000HIGH 7.3: A vulnerability was identified in PHPGurukul Online Shopping Portal Project 2.0. This affects an unknown part of the file shopping/bill-ship-addresses.php. The manipulation of the argument billingpincode leads to sql injection. It is possible to initiate the attack remotely. The exploit has been dishttps://patchthecve.com/cve/CVE-2025-9011.htmlhttps://patchthecve.com/cve/CVE-2025-9011.htmlWed, 17 Jun 2026 10:08:09 +0000HIGH 7.3: A vulnerability was determined in PHPGurukul Online Shopping Portal Project 2.0. Affected by this issue is some unknown functionality of the file /shopping/signup.php. The manipulation of the argument emailid leads to sql injection. The attack may be launched remotely. The exploit has been disclosedhttps://patchthecve.com/cve/CVE-2025-26156.htmlhttps://patchthecve.com/cve/CVE-2025-26156.htmlWed, 17 Jun 2026 09:01:29 +0000HIGH 8.8: A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbitrary code via orderid POST request parameter.