PT-2025-29334 · Phpgurukul · Phpgurukul Vehicle Parking Management System

·

CVE-2025-7482

·

Published

2025-07-12

·

Updated

2025-07-12

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: PHPGurukul Vehicle Parking Management System version 1.13
Description: A critical issue exists in PHPGurukul Vehicle Parking Management System 1.13. The vulnerability is due to a SQL injection flaw within the /users/print.php file. Manipulation of the vid parameter can lead to unauthorized database access. The exploit for this issue has been publicly disclosed and may be used for remote attacks.
Recommendations: Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the /users/print.php file. Avoid using the vid parameter in the affected file until the issue is resolved.

Exploit

Fix

Special Elements Injection

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-7482

Affected Products

Phpgurukul Vehicle Parking Management System