CVE-2025-10604: PHPGurukul Online Discussion Forum edit_member.php sql injection
A vulnerability was identified in PHPGurukul Online Discussion Forum 1.0. This affects an unknown part of the file /admin/editmember.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10604?
CVE-2025-10604 is a medium severity vulnerability due to its potential for remote SQL injection.
How do I fix CVE-2025-10604?
To fix CVE-2025-10604, validate and sanitize the input for the ID parameter in the /admin/edit_member.php file.
What type of vulnerability is CVE-2025-10604?
CVE-2025-10604 is an SQL injection vulnerability that affects the PHPGurukul Online Discussion Forum.
Can CVE-2025-10604 be exploited remotely?
Yes, CVE-2025-10604 can be exploited remotely, making it critical for affected installations to be addressed immediately.
What are the consequences of exploiting CVE-2025-10604?
Exploiting CVE-2025-10604 could allow attackers to execute arbitrary SQL commands and access sensitive database information.