PT-2025-29441 · Phpgurukul · Phpgurukul Dairy Farm Shop Management System

·

CVE-2025-7588

·

Published

2025-07-14

·

Updated

2025-07-14

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: PHPGurukul Dairy Farm Shop Management System version 1.3
Description: A critical issue exists in PHPGurukul Dairy Farm Shop Management System 1.3. The productname argument within the edit-product.php file is susceptible to SQL injection. This allows for remote exploitation of the system. The exploit for this issue has been publicly disclosed.
Recommendations: Update to a newer version of PHPGurukul Dairy Farm Shop Management System that addresses this SQL injection issue. As a temporary workaround, restrict access to the edit-product.php file or sanitize the productname input to prevent SQL injection attacks.

Exploit

Fix

Special Elements Injection

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-7588

Affected Products

Phpgurukul Dairy Farm Shop Management System