PT-2025-10018

CVE-2025-2051

Published

2025-03-07

Updated

2025-03-07

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PHPGurukul Apartment Visitors Management System version 1.0

Description A critical issue has been discovered, affecting the /search-visitor.php file, where manipulation of the searchdata argument leads to SQL injection. This issue can be exploited remotely.

Recommendations For PHPGurukul Apartment Visitors Management System version 1.0, consider restricting access to the /search-visitor.php file until a fix is available, and avoid using the searchdata argument in this context to minimize the risk of exploitation.

Exploitability

Exploit

Fix

Impacts

Researchers

3034177456

Vendors

Affected products

Weakness enumeration

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\'Injection\')

CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')

Related identifiers