PT-2025-19339 · Unknown · Phpgurukul Emergency Ambulance Hiring Portal
Xiguala123
·
Publicado
2025-05-05
·
Atualizado
2025-05-10
·
CVE-2025-4264
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PHPGurukul Emergency Ambulance Hiring Portal version 1.0
Description
A critical issue has been discovered, affecting an unknown function of the file /admin/edit-ambulance.php. The manipulation of the
dconnum argument leads to SQL injection. This issue can be exploited remotely. The exploit has been publicly disclosed and may be used.Recommendations
For PHPGurukul Emergency Ambulance Hiring Portal version 1.0, consider restricting access to the /admin/edit-ambulance.php file to minimize the risk of exploitation. As a temporary workaround, avoid using the
dconnum argument in the affected file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.Exploit
Correção
SQL injection
Special Elements Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Phpgurukul Emergency Ambulance Hiring Portal