PT-2025-35778 · Unknown · Phpgurukul Complaint Management System

CVE-2025-57146 · Publicado 2025-09-03 · Atualizado 2025-09-08

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions phpgurukul Complaint Management System in PHP version 2.0

Description The phpgurukul Complaint Management System in PHP is susceptible to SQL Injection. The vulnerability is located in the user/reset-password.php file and can be triggered through the mobileno parameter.

Recommendations phpgurukul Complaint Management System in PHP version 2.0: Sanitize the mobileno parameter in the user/reset-password.php file to prevent SQL Injection.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2025-57146

Produtos afetados

Phpgurukul Complaint Management System

Referências · 7

• 🔥 https://doc.clickup.com/3897127/p/h/3pxt7-12536/a7b1b87ee99576c · Exploit
• 🔥 https://github.com/hptcybersecurity/CVE/blob/main/CVE-2025-57146.md · Exploit
• https://twitter.com/CVEnew/status/1963275357051551761 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-57146 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-57146 · Aviso do Fabricante
• https://t.me/cveNotify/134265 · Publicação no Telegram
• https://t.me/cveNotify/134657 · Publicação no Telegram