PT-2025-38229 · Phpgurukul · Online Discussion Forum

Maximdevere · Published 2025-09-17 · Updated 2025-09-17 · CVE-2025-10603

Mitre

CVSS v3.1

7.3

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was determined in PHPGurukul Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /admin/admin forum/search result.php. Executing manipulation of the argument Search can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2025-10603

Affected Products

Online Discussion Forum

References · 6

• 🔥 https://github.com/maximdevere/cve/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10603 · Security Note
• https://phpgurukul.com · Note
• https://vuldb.com/?id.324623 · Note
• https://vuldb.com/?ctiid.324623 · Note
• https://vuldb.com/?submit.649867 · Note