PT-2025-26632 · Unknown · Phpgurukul Pre-School Enrollment System

CVE-2025-50348

·

Published

2025-06-23

·

Updated

2025-06-25

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions: PHPGurukul Pre-School Enrollment System Project version V1.0
Description: The issue concerns a Directory Traversal vulnerability in the update-class-pic.php file. This allows unauthorized access to sensitive files and directories.
Recommendations: For PHPGurukul Pre-School Enrollment System Project version V1.0, as a temporary workaround, consider restricting access to the update-class-pic.php file until a patch is available. Avoid using the update-class-pic.php file in sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-50348

Affected Products

Phpgurukul Pre-School Enrollment System