PHPGURUKUL Online Shopping Portal 2.1 - Insecure Direct Object Reference in Track Order Function
Insecure Direct Object Reference (IDOR) in the Track order function in PHPGURUKUL Online Shopping Portal 2.1 allows information disclosure via the oid parameter.