PHPGurukul Online Shopping Portal 2.0 contains an SQL Injection vulnerability in the login.php script via the fullname, emailid, and contactno parameters. This flaw allows an unauthenticated attacker to inject malicious SQL commands, potentially leading to unauthorized data access or modification. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level. No patch or official remediation information is currently available.