CVE-2025-1902: PHPGurukul Student Record System password-recovery.php sql injection
Published Mar 4, 2025
·Updated
A vulnerability was found in PHPGurukul Student Record System 3.2. It has been declared as critical. This vulnerability affects unknown code of the file /password-recovery.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Phpgurukul Student Record System
Phpgurukul Student Record System=3.2
Event History
Mar 4, 2025
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-1902?
CVE-2025-1902 has been declared as critical.
2
How does CVE-2025-1902 affect the PHPGurukul Student Record System?
CVE-2025-1902 affects the /password-recovery.php file and allows for SQL injection via manipulation of the emailid argument.
3
Can CVE-2025-1902 be exploited remotely?
Yes, the attack can be initiated remotely.
4
What version of the software is affected by CVE-2025-1902?
CVE-2025-1902 affects PHPGurukul Student Record System version 3.2.
5
How can I fix CVE-2025-1902?
To fix CVE-2025-1902, ensure that proper input validation and parameterized queries are implemented in the application.