PT-2025-12696 · Unknown · Phpgurukul Old Age Home Management System
0Xabandon
·
Publicado
2025-03-24
·
Atualizado
2025-05-15
·
CVE-2025-2734
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PHPGurukul Old Age Home Management System version 1.0
Description
A critical issue was found in the PHPGurukul Old Age Home Management System. The problem affects an unknown function of the file /admin/aboutus.php. Manipulating the
pagetitle argument leads to SQL injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.Recommendations
For PHPGurukul Old Age Home Management System version 1.0, as a temporary workaround, consider disabling access to the /admin/aboutus.php file until a patch is available. Restrict the manipulation of the
pagetitle argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
SQL injection
Special Elements Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Phpgurukul Old Age Home Management System