PT-2025-30353 · Phpgurukul · Autotaxi Stand Management System

Longlagon · Published 2025-07-21 · Updated 2025-07-22 · CVE-2025-7943

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHPGurukul Taxi Stand Management System version 1.0

Description A problematic issue exists in PHPGurukul Taxi Stand Management System 1.0, affecting an unknown functionality within the /admin/search-autoortaxi.php file. Manipulation of the searchdata argument can lead to cross site scripting (XSS). The attack can be launched remotely, and the exploit has been publicly disclosed and may be used.

Recommendations For PHPGurukul Taxi Stand Management System version 1.0, sanitize or properly encode the searchdata argument in the /admin/search-autoortaxi.php file to prevent XSS.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-7943

Affected Products

Autotaxi Stand Management System

References · 10

• 🔥 https://github.com/LagonGit/ReportCVE/issues/8 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-7943 · Security Note
• https://osv.dev/vulnerability/CVE-2025-7943 · Vendor Advisory
• https://phpgurukul.com · Note
• https://vuldb.com/?id.317084 · Note
• https://t.me/cvenotify/129756 · Telegram Post
• https://vuldb.com/?submit.619178 · Note
• https://t.me/cvetracker/28342 · Telegram Post
• https://vuldb.com/?ctiid.317084 · Note
• https://twitter.com/CVEnew/status/1947435532180472288 · Twitter Post