← Database

CVE-2021-37807

HIGH CVSS: 7.5 Published: 2021-10-27 Modified: 2026-06-17

Description

An SQL Injection vulneraility exists in https://phpgurukul.com Online Shopping Portal 3.1 via the email parameter on the /check_availability.php endpoint that serves as a checker whether a new user's email is already exist within the database.

Affected Platforms

Phpgurukul Online Shopping Portal

Weakness Type

CWE-89

References