PT-2025-30153 · Phpgurukul · Phpgurukul Apartment Visitors Management System

Ppzzaarr · Published 2025-07-19 · Updated 2025-07-19 · CVE-2025-7856

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHPGurukul Apartment Visitors Management System version 1.0

Description A vulnerability exists in the PHPGurukul Apartment Visitors Management System that allows for cross site scripting. The issue is located in the pass-details.php file within the HTTP POST Request Handler component. Manipulation of the visname argument can lead to exploitation. The exploit has been publicly disclosed.

Recommendations Address the issue in PHPGurukul Apartment Visitors Management System version 1.0 by sanitizing the visname argument within the pass-details.php file to prevent cross site scripting.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-7856

Affected Products

Phpgurukul Apartment Visitors Management System

References · 10

• 🔥 https://github.com/HieuGITLAB/my-cves/issues/8 · Exploit
• https://osv.dev/vulnerability/CVE-2025-7856 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-7856 · Security Note
• https://phpgurukul.com · Note
• https://vuldb.com/?submit.616843 · Note
• https://t.me/cvetracker/28230 · Telegram Post
• https://twitter.com/CVEnew/status/1946689277213241672 · Twitter Post
• https://vuldb.com/?ctiid.316969 · Note
• https://vuldb.com/?id.316969 · Note
• https://t.me/cvenotify/129567 · Telegram Post