PT-2025-12696 · Unknown · Phpgurukul Old Age Home Management System
0Xabandon
·
Published
2025-03-24
·
Updated
2025-05-15
·
CVE-2025-2734
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PHPGurukul Old Age Home Management System version 1.0
Description
A critical issue was found in the PHPGurukul Old Age Home Management System. The problem affects an unknown function of the file /admin/aboutus.php. Manipulating the
pagetitle argument leads to SQL injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.Recommendations
For PHPGurukul Old Age Home Management System version 1.0, as a temporary workaround, consider disabling access to the /admin/aboutus.php file until a patch is available. Restrict the manipulation of the
pagetitle argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
SQL injection
Special Elements Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Phpgurukul Old Age Home Management System