Unknown · Phpgurukul Boat Booking System · CVE-2025-4157
**Name of the Vulnerable Software and Affected Versions**
PHPGurukul Boat Booking System version 1.0
**Description**
A critical issue was found in the PHPGurukul Boat Booking System, affecting the file /admin/booking-details.php. The manipulation of the `Status` argument leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
**Recommendations**
For PHPGurukul Boat Booking System version 1.0, update the system to the latest security patch to prevent threats.
As a temporary workaround, consider restricting access to the /admin/booking-details.php file until a patch is available.
Avoid using the `Status` argument in the affected file until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.