PT-2025-23782 · Unknown · Phpgurukul Dairy Farm Shop Management System
Flyfish567
·
Publicado
2025-06-04
·
Atualizado
2025-06-09
·
CVE-2025-5577
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PHPGurukul Dairy Farm Shop Management System version 1.3
Description
A critical issue was found in the PHPGurukul Dairy Farm Shop Management System. The problem is related to an unknown function of the file /profile.php. The manipulation of the
mobilenumber argument leads to SQL injection. This issue can be exploited remotely.Recommendations
For PHPGurukul Dairy Farm Shop Management System version 1.3, as a temporary workaround, consider restricting access to the /profile.php file until a patch is available. Avoid using the
mobilenumber argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
SQL injection
Special Elements Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Phpgurukul Dairy Farm Shop Management System