PT-2025-30350 · Unknown · Phpgurukul Time Table Generator System

Longlagon · Published 2025-07-21 · Updated 2025-07-22 · CVE-2025-7941

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHPGurukul Time Table Generator System version 1.0 PHPGurukul Taxi Stand Management System version 1.0

Description A problematic vulnerability exists due to cross site scripting. Manipulation of the adminname argument in the /admin/profile.php file allows for remote attacks. The exploit has been publicly disclosed and may be utilized.

Recommendations For PHPGurukul Time Table Generator System version 1.0, sanitize or validate the adminname argument in the /admin/profile.php file to prevent the injection of malicious scripts. For PHPGurukul Taxi Stand Management System version 1.0, sanitize or validate the adminname argument in the /admin/profile.php file to prevent the injection of malicious scripts.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-7941

Affected Products

Phpgurukul Time Table Generator System

References · 11

• 🔥 https://github.com/LagonGit/ReportCVE/issues/6 · Exploit
• 🔥 https://drive.google.com/file/d/19C2IWKR38Qqw7RLNn1nWzvWv4GszgPnU/view · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-7941 · Security Note
• https://osv.dev/vulnerability/CVE-2025-7941 · Vendor Advisory
• https://phpgurukul.com · Note
• https://t.me/cvenotify/129752 · Telegram Post
• https://twitter.com/CVEnew/status/1947426679921447165 · Twitter Post
• https://vuldb.com/?id.317082 · Note
• https://t.me/cvetracker/28339 · Telegram Post
• https://vuldb.com/?ctiid.317082 · Note
• https://vuldb.com/?submit.619141 · Note