CVE-2025-65380 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username parameter accepts unvalidated user inpu…
Medium CVSS: 6.5

CVE-2025-65380

PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username parameter accepts unvalidated user input, which is then concatenated directly into a backend SQL query.
Vendor
Phpgurukul
Product
Billing System
CWE
CWE-89
Yayın Tarihi
2025-12-02 21:15:52
Güncelleme
2025-12-04 19:01:55
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-89 Billing System MEDIUM Phpgurukul 2025

Referanslar

https://github.com/dewcode91/security-research/blob/main/CVE-2025-65380.md https://phpgurukul.com/billing-system-using-php-and-mysql