First published: Sun Feb 23 2025(Updated: )
A vulnerability was found in PHPGurukul Online Nurse Hiring System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /book-nurse.php?bookid=1. The manipulation of the argument contactname leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Anujkumar Online Nurse Hiring System | ||
Anujkumar Online Nurse Hiring System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2025-1581 has been declared as critical due to a SQL injection vulnerability.
To fix CVE-2025-1581, you should sanitize and validate the input parameters in the /book-nurse.php file, especially for the contactname argument.
CVE-2025-1581 is a SQL injection vulnerability affecting the PHPGurukul Online Nurse Hiring System.
The vulnerability affects the functionality of the file /book-nurse.php when manipulating the contactname argument.
Yes, CVE-2025-1581 can be exploited remotely, allowing attackers to execute arbitrary SQL commands.