PT-2025-42923 · Phpgurukul · Bank Locker Management System

Published 2025-10-21 · Updated 2025-10-21 · CVE-2025-61255

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Bank Locker Management System by PHPGurukul (affected versions not specified)

Description The Bank Locker Management System is susceptible to a Cross-Site Scripting (XSS) issue. The /search parameter does not properly sanitize input, allowing the injection of arbitrary HTML and JavaScript code. Successful exploitation could lead to information disclosure and user redirection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-61255

Affected Products

Bank Locker Management System

References · 4

• 🔥 https://github.com/nikhilpatidar01/CVE-Assigned-Reports/blob/Master/CVE-2025-61255/advisory.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-61255 · Security Note
• https://phpgurukul.com/bank-locker-management-system-using-php-and-mysql · Note
• https://twitter.com/CVEnew/status/1980708197519196424 · Twitter Post