CVE-2025-25462

Name of the Vulnerable Software and Affected Versions PHPGurukul Land Record System Project version 1.0

Description A SQL Injection issue was discovered in the /admin/add-propertytype.php file, allowing remote attackers to execute arbitrary code via the propertytype POST request parameter in the PHP v1.0 version of the system.

Recommendations For version 1.0, consider restricting access to the /admin/add-propertytype.php file and avoid using the propertytype parameter in the affected POST request until a fix is available. As a temporary workaround, disabling the execution of arbitrary code via the propertytype parameter can help minimize the risk of exploitation.