CVE-2025-10025: PHPGurukul Online Course Registration semester.php sql injection

Published Sep 5, 2025

Updated

A vulnerability has been found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/semester.php. The manipulation of the argument semester leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Online Course Registration

Phpgurukul Online Course Registration=3.1

Event History

Sep 5, 2025

CVE Published

via MITRE·07:32 PM

Data Sourced

via MITRE·07:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10025?

CVE-2025-10025 has been classified as a critical severity vulnerability due to its potential for remote SQL injection.

How do I fix CVE-2025-10025?

To fix CVE-2025-10025, ensure proper input validation and use prepared statements to eliminate SQL injection risks.

What systems are affected by CVE-2025-10025?

CVE-2025-10025 affects PHPGurukul Online Course Registration version 3.1 in its /admin/semester.php function.

Can CVE-2025-10025 be exploited remotely?

Yes, CVE-2025-10025 can be exploited remotely, allowing attackers to manipulate SQL queries through the semester parameter.

What type of attack does CVE-2025-10025 enable?

CVE-2025-10025 enables SQL injection attacks, allowing unauthorized data access through manipulated queries.