PT-2025-44003 · Phpgurukul · Curfew E-Pass Management System

Kiyoleee · Published 2025-10-27 · Updated 2025-11-03 · CVE-2025-12303

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHPGurukul Curfew e-Pass Management System version 1.0

Description A flaw exists in PHPGurukul Curfew e-Pass Management System version 1.0. Manipulation of the adminname/email argument within an unknown function of the admin-profile.php file can lead to cross site scripting. This attack can be launched remotely. An exploit for this issue has been published.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-12303

Affected Products

Curfew E-Pass Management System

References · 8

• 🔥 https://github.com/kiyoleee/CVE/issues/1 · Exploit
• https://osv.dev/vulnerability/CVE-2025-12303 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-12303 · Security Note
• https://vuldb.com/?id.329975 · Note
• https://vuldb.com/?ctiid.329975 · Note
• https://phpgurukul.com · Note
• https://t.me/cveNotify/141381 · Telegram Post
• https://vuldb.com/?submit.676197 · Note