PHPGurukul Online Shopping Portal 2.0 has a SQL Injection vulnerability in the product parameter of the search-result.php page. This vulnerability allows an unauthenticated attacker to inject malicious SQL commands, potentially leading to unauthorized data access or modification. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level.