PT-2025-21625 · Unknown · Phpgurukul Complaint Management System

Qkset

·

Published

2025-05-16

·

Updated

2025-05-21

·

CVE-2025-4761

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: PHPGurukul Complaint Management System version 2.0
Description: A critical vulnerability has been found in the PHPGurukul Complaint Management System, affecting unknown code of the file /admin/admin-profile.php. The manipulation of the mobilenumber argument leads to SQL injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Recommendations: For PHPGurukul Complaint Management System version 2.0, consider disabling the mobilenumber argument in the /admin/admin-profile.php file as a temporary workaround until a patch is available. Restrict access to the /admin/admin-profile.php file to minimize the risk of exploitation. Avoid using the mobilenumber argument in the affected file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74CWE-89

Related Identifiers

CVE-2025-4761

Affected Products

Phpgurukul Complaint Management System