PT-2025-35778 · Unknown · Phpgurukul Complaint Management System

Published 2025-09-03 · Updated 2025-09-08 · CVE-2025-57146

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions phpgurukul Complaint Management System in PHP version 2.0

Description The phpgurukul Complaint Management System in PHP is susceptible to SQL Injection. The vulnerability is located in the user/reset-password.php file and can be triggered through the mobileno parameter.

Recommendations phpgurukul Complaint Management System in PHP version 2.0: Sanitize the mobileno parameter in the user/reset-password.php file to prevent SQL Injection.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-57146

Affected Products

Phpgurukul Complaint Management System

References · 7

• 🔥 https://doc.clickup.com/3897127/p/h/3pxt7-12536/a7b1b87ee99576c · Exploit
• 🔥 https://github.com/hptcybersecurity/CVE/blob/main/CVE-2025-57146.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-57146 · Security Note
• https://osv.dev/vulnerability/CVE-2025-57146 · Vendor Advisory
• https://twitter.com/CVEnew/status/1963275357051551761 · Twitter Post
• https://t.me/cveNotify/134265 · Telegram Post
• https://t.me/cveNotify/134657 · Telegram Post