PT-2025-35725 · Unknown · Phpgurukul Complaint Management System

Published 2025-09-03 · Updated 2025-09-03 · CVE-2025-57149

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpgurukul Complaint Management System version 2.0

Description The Complaint Management System is susceptible to SQL Injection attacks. The vulnerability is located in the /complaint-details.php file and can be triggered through the cid parameter.

Recommendations Sanitize the cid parameter in the /complaint-details.php file to prevent SQL Injection attacks.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-57149

Affected Products

Phpgurukul Complaint Management System

References · 5

• 🔥 https://github.com/hptcybersecurity/CVE/blob/main/CVE-2025-57149.md · Exploit
• 🔥 https://doc.clickup.com/3897127/p/h/3pxt7-12476/312c6ba68f555ca · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-57149 · Security Note
• https://osv.dev/vulnerability/CVE-2025-57149 · Vendor Advisory
• https://twitter.com/CVEnew/status/1963275360050491640 · Twitter Post