📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global phishing Cross-sector HIGH 2h Global apt Education CRITICAL 2h Global vulnerability Enterprise Software / ERP Systems CRITICAL 3h Global vulnerability IT Infrastructure CRITICAL 3h Global vulnerability Technology and Software Development HIGH 4h Global vulnerability Enterprise IT and Government CRITICAL 4h Global ransomware Multiple Sectors / Enterprise CRITICAL 5h Global general Technology and Legal MEDIUM 6h Global ransomware Financial Services / Cryptocurrency CRITICAL 6h Global general Industrial Control Systems / Operational Technology HIGH 7h Global phishing Cross-sector HIGH 2h Global apt Education CRITICAL 2h Global vulnerability Enterprise Software / ERP Systems CRITICAL 3h Global vulnerability IT Infrastructure CRITICAL 3h Global vulnerability Technology and Software Development HIGH 4h Global vulnerability Enterprise IT and Government CRITICAL 4h Global ransomware Multiple Sectors / Enterprise CRITICAL 5h Global general Technology and Legal MEDIUM 6h Global ransomware Financial Services / Cryptocurrency CRITICAL 6h Global general Industrial Control Systems / Operational Technology HIGH 7h Global phishing Cross-sector HIGH 2h Global apt Education CRITICAL 2h Global vulnerability Enterprise Software / ERP Systems CRITICAL 3h Global vulnerability IT Infrastructure CRITICAL 3h Global vulnerability Technology and Software Development HIGH 4h Global vulnerability Enterprise IT and Government CRITICAL 4h Global ransomware Multiple Sectors / Enterprise CRITICAL 5h Global general Technology and Legal MEDIUM 6h Global ransomware Financial Services / Cryptocurrency CRITICAL 6h Global general Industrial Control Systems / Operational Technology HIGH 7h
Vulnerabilities

CVE-2026-5583

Medium
SQL Injection Vulnerability in PHPGurukul Online Shopping Portal 2.1 (CVE-2026-5583)
CWE-74 — Weakness Type
Published: Apr 5, 2026  ·  Modified: Apr 8, 2026  ·  Source: NVD
CVSS v3
6.3
🔗 NVD Official
📄 Description (English)

A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

🤖 AI Executive Summary

CVE-2026-5583 is a SQL injection vulnerability in PHPGurukul Online Shopping Portal Project 2.1 affecting the /my-profile.php file through the fullname parameter. With a CVSS score of 6.3 (medium) and publicly disclosed exploit details, this poses a moderate risk to organizations using this open-source e-commerce platform. No patch is currently available, requiring immediate compensating controls and application hardening.

📄 Description (Arabic)

تم اكتشاف ثغرة أمنية من نوع حقن SQL في بوابة التسوق الإلكتروني PHPGurukul الإصدار 2.1 في ملف /my-profile.php عبر التلاعب بمعامل fullname. يمكن للمهاجم استغلال هذه الثغرة عن بُعد لتنفيذ استعلامات SQL خبيثة على قاعدة البيانات. قد يؤدي الاستغلال الناجح إلى تسريب بيانات العملاء الحساسة بما في ذلك المعلومات الشخصية وبيانات الدفع. تم نشر تفاصيل الاستغلال علنياً مما يزيد من خطورة التهديد في ظل عدم توفر تصحيح أمني رسمي.

🤖 ملخص تنفيذي (AI)

CVE-2026-5583 هي ثغرة حقن SQL في مشروع بوابة التسوق الإلكترونية PHPGurukul الإصدار 2.1 تؤثر على ملف /my-profile.php من خلال معامل fullname. مع درجة CVSS 6.3 (متوسطة) وتفاصيل الاستغلال المكشوفة علنًا، يشكل هذا خطرًا معتدلًا على المنظمات التي تستخدم هذه المنصة مفتوحة المصدر. لا يتوفر تصحيح حاليًا، مما يتطلب تطبيق فوري للضوابط البديلة وتقسية التطبيق.

🤖 AI Intelligence Analysis Analyzed: May 19, 2026 09:33
🇸🇦 Saudi Arabia Impact Assessment
This vulnerability primarily impacts Saudi e-commerce businesses, small-to-medium enterprises (SMEs), and government agencies using PHPGurukul for online shopping platforms. High-risk sectors include: retail/e-commerce operators, government procurement portals, healthcare e-pharmacies, and financial services offering online shopping. Potential impacts include unauthorized access to customer personal data (names, addresses, payment information), database manipulation, and compliance violations under SAMA regulations for financial data protection and NCA cybersecurity requirements.
🏢 Affected Saudi Sectors
E-commerce and Retail Government and Public Sector Healthcare and Pharmaceuticals Financial Services Telecommunications Small and Medium Enterprises (SMEs)
⚖️ Saudi Risk Score (AI)
6.8
/ 10.0
🔧 Remediation Steps (English)
IMMEDIATE ACTIONS:
1. Identify all instances of PHPGurukul Online Shopping Portal 2.1 in your environment
2. Disable or restrict access to /my-profile.php functionality until patching is available
3. Implement Web Application Firewall (WAF) rules to block SQL injection patterns in the fullname parameter

COMPENSATING CONTROLS:
1. Apply input validation: whitelist only alphanumeric characters and spaces for fullname field
2. Implement parameterized queries/prepared statements in the affected code
3. Use stored procedures with input sanitization
4. Enable SQL error suppression to prevent information disclosure
5. Implement database user privilege separation (least privilege principle)

DETECTION RULES:
1. Monitor for SQL keywords (UNION, SELECT, DROP, INSERT) in fullname parameter logs
2. Alert on unusual database query patterns or failed authentication attempts
3. Log all /my-profile.php access attempts with parameter values
4. Implement IDS/IPS signatures for SQL injection patterns

PATCHING STRATEGY:
1. Contact PHPGurukul project maintainers for security patch timeline
2. Prepare for immediate deployment once patch is released
3. Consider migrating to alternative, actively maintained e-commerce platforms if patch timeline is unclear
🔧 خطوات المعالجة (العربية)
الإجراءات الفورية:
1. تحديد جميع نسخ PHPGurukul Online Shopping Portal 2.1 في بيئتك
2. تعطيل أو تقييد الوصول إلى وظيفة /my-profile.php حتى يتوفر التصحيح
3. تطبيق قواعد جدار حماية تطبيقات الويب (WAF) لحجب أنماط حقن SQL في معامل fullname

الضوابط البديلة:
1. تطبيق التحقق من المدخلات: السماح فقط بالأحرف الأبجدية الرقمية والمسافات في حقل fullname
2. تطبيق الاستعلامات المعاملة/البيانات المحضرة في الكود المتأثر
3. استخدام الإجراءات المخزنة مع تنظيف المدخلات
4. تفعيل قمع أخطاء SQL لمنع الكشف عن المعلومات
5. تطبيق فصل امتيازات مستخدم قاعدة البيانات (مبدأ أقل امتياز)

قواعد الكشف:
1. مراقبة كلمات SQL الرئيسية (UNION, SELECT, DROP, INSERT) في سجلات معامل fullname
2. التنبيه على أنماط استعلامات قاعدة البيانات غير العادية أو محاولات المصادقة الفاشلة
3. تسجيل جميع محاولات الوصول إلى /my-profile.php مع قيم المعاملات
4. تطبيق توقيعات IDS/IPS لأنماط حقن SQL

استراتيجية التصحيح:
1. التواصل مع مشرفي مشروع PHPGurukul لمعرفة جدول زمني لتصحيح الأمان
2. التحضير للنشر الفوري بمجرد توفر التصحيح
3. النظر في الهجرة إلى منصات التجارة الإلكترونية البديلة المدعومة بنشاط إذا كان جدول التصحيح غير واضح
📋 Regulatory Compliance Mapping
🟢 NCA ECC 2024
ECC 2024 A.14.2.1 - Secure development policy and procedures ECC 2024 A.14.2.5 - Secure development environment ECC 2024 A.14.2.8 - System security testing ECC 2024 A.12.6.1 - Management of technical vulnerabilities
🔵 SAMA CSF
SAMA CSF ID.BE-3.1 - Organizational resilience objectives SAMA CSF PR.DS-6 - Data is protected from unauthorized access SAMA CSF DE.CM-1 - The network is monitored to detect potential cybersecurity events SAMA CSF RS.MI-2 - Incidents are mitigated
🟡 ISO 27001:2022
ISO 27001:2022 A.8.1 - User endpoint devices ISO 27001:2022 A.8.3 - Access control ISO 27001:2022 A.14.2 - Development security ISO 27001:2022 A.14.3 - Test data
🟣 PCI DSS v4.0.1
PCI DSS 6.5.1 - Injection flaws PCI DSS 6.2 - Security patches and updates PCI DSS 11.3 - Penetration testing
📊 CVSS Score
6.3
/ 10.0 — Medium
📊 CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack VectorN — None / Network
Attack ComplexityL — Low / Local
Privileges RequiredL — Low / Local
User InteractionN — None / Network
ScopeU — Unchanged
ConfidentialityL — Low / Local
IntegrityL — Low / Local
AvailabilityL — Low / Local
📋 Quick Facts
Severity Medium
CVSS Score6.3
CWECWE-74
EPSS0.01%
Exploit No
Patch ✗ No
Published 2026-04-05
Source Feed nvd
Views 15
🇸🇦 Saudi Risk Score
6.8
/ 10.0 — Saudi Risk
Priority: HIGH
🏷️ Tags
CWE-74
Share this CVE
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.