PT-2025-11518 · Unknown · Phpgurukul Local Services Search Engine Management System
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PHPGurukul Local Services Search Engine Management System version 1.0
Description
A critical issue affects the processing of the file /serviceman-search.php, where the manipulation of the
location argument leads to SQL injection. This issue can be exploited remotely.Recommendations
For PHPGurukul Local Services Search Engine Management System version 1.0, consider restricting access to the /serviceman-search.php file until a patch is available. As a temporary workaround, avoid using the
location argument in the affected file to minimize the risk of exploitation.Exploit
Fix
Special Elements Injection
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Phpgurukul Local Services Search Engine Management System