PHPGurukul Online Shopping Portal 2.0 contains a SQL Injection vulnerability in the username parameter on the admin page. This flaw allows an unauthenticated attacker to inject malicious SQL commands, potentially leading to unauthorized data access or modification. The vulnerability has a CVSS score of 6.5, indicating a medium severity impact with low complexity and no required privileges or user interaction.