PT-2025-29333 · Phpgurukul · Phpgurukul Vehicle Parking Management System

F1Rstb100D · Published 2025-07-12 · Updated 2025-07-12 · CVE-2025-7481

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: PHPGurukul Vehicle Parking Management System version 1.13

Description: A critical issue exists in PHPGurukul Vehicle Parking Management System version 1.13. The vulnerability is located in an unknown part of the /users/profile.php file. Manipulation of the firstname argument can lead to SQL injection. The attack can be initiated remotely, and the exploit has been publicly disclosed. Other parameters may also be affected.

Recommendations: Update to a newer version that contains a fix for this issue. As a temporary workaround, restrict access to the /users/profile.php file. Sanitize the firstname parameter to prevent SQL injection.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-7481

Affected Products

Phpgurukul Vehicle Parking Management System

References · 10

• 🔥 https://github.com/f1rstb100d/myCVE/issues/111 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-7481 · Security Note
• https://osv.dev/vulnerability/CVE-2025-7481 · Vendor Advisory
• https://t.me/cvetracker/27649 · Telegram Post
• https://twitter.com/CVEnew/status/1944078699550159248 · Twitter Post
• https://phpgurukul.com · Note
• https://vuldb.com/?ctiid.316131 · Note
• https://t.me/cvenotify/128709 · Telegram Post
• https://vuldb.com/?submit.610569 · Note
• https://vuldb.com/?id.316131 · Note