PHPGurukul Online Shopping Portal 2.0 contains a critical SQL Injection vulnerability in the forgot-password.php script via the email parameter. This flaw allows unauthenticated attackers to execute arbitrary SQL commands, potentially leading to full compromise of the database confidentiality, integrity, and availability.