CVE-2025-65379

Medium CVSS: 6.5

PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the /admin/password-recovery.php endpoint. Specifically, the username and mobileno parameters accepts unvalidated user input, which is then concatenated directly into a backend SQL query.

Vendor

Phpgurukul

Product

Billing System

CWE

CWE-89

Yayın Tarihi

2025-12-02 20:15:53

Güncelleme

2025-12-04 19:13:34

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-89 Billing System MEDIUM Phpgurukul 2025

Referanslar

https://github.com/dewcode91/security-research/blob/main/CVE-2025-65379.md https://phpgurukul.com/billing-system-using-php-and-mysql/

Benzer Kayıtlar

Medium

CVE-2024-51226

A stored cross-site scripting (XSS) vulnerability in the component /admin/search-vehicle.php of Phpgurukul Vehicle Recor…

Medium

CVE-2024-51225

A stored cross-site scripting (XSS) vulnerability in the component /admin/add-brand.php of Phpgurukul Vehicle Record Man…

Medium

CVE-2024-51224

Multiple cross-site scripting (XSS) vulnerabilities in the component /admin/edit-vehicle.php of Phpgurukul Vehicle Recor…

Medium

CVE-2024-51223

A stored cross-site scripting (XSS) vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Manag…

Medium

CVE-2024-51222

A stored cross-site scripting (XSS) vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Manag…

Medium

CVE-2026-3403

A vulnerability was detected in PHPGurukul Student Record Management System 1.0. This issue affects some unknown process…