CVE-2025-1966: PHPGurukul Pre-School Enrollment System index.php sql injection
A vulnerability classified as critical was found in PHPGurukul Pre-School Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1966?
CVE-2025-1966 has been classified as a critical vulnerability.
How does CVE-2025-1966 compromise the system?
CVE-2025-1966 allows SQL injection through the manipulation of the username argument in the /admin/index.php file.
Which software is affected by CVE-2025-1966?
CVE-2025-1966 affects PHPGurukul Pre-School Enrollment System version 1.0.
How can I fix CVE-2025-1966?
To fix CVE-2025-1966, sanitize and validate all user inputs, particularly the username argument.
Can CVE-2025-1966 be exploited remotely?
Yes, CVE-2025-1966 can be exploited remotely by an attacker.