PT-2025-26289 · Unknown · Phpgurukul Pre-School Enrollment System

·

CVE-2025-6319

·

Publicado

2025-06-20

·

Atualizado

2025-06-21

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PHPGurukul Pre-School Enrollment System version 1.0
Description A critical issue has been found in the processing of the file /admin/add-teacher.php. The manipulation of the tsubject argument leads to SQL injection. The attack can be initiated remotely. An exploit has been publicly disclosed and may be used.
Recommendations For PHPGurukul Pre-School Enrollment System version 1.0, consider disabling access to the /admin/add-teacher.php file until a patch is available. Restrict the use of the tsubject argument in the affected file to minimize the risk of exploitation.

Exploit

Correção

SQL injection

Special Elements Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2025-6319

Produtos afetados

Phpgurukul Pre-School Enrollment System