CVE-2025-2679

Name of the Vulnerable Software and Affected Versions PHPGurukul Bank Locker Management System version 1.0

Description A critical issue was found in the PHPGurukul Bank Locker Management System. The problem is related to an unknown function of the file /contact-us.php. The manipulation of the pagetitle argument leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Recommendations To resolve the issue, consider disabling the /contact-us.php file until a patch is available. As a temporary workaround, restrict access to the pagetitle argument in the /contact-us.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.