CVE-2025-2052: PHPGurukul Apartment Visitors Management System forgot-password.php sql injection
A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /forgot-password.php. The manipulation of the argument contactno leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2052?
CVE-2025-2052 is classified as a critical vulnerability.
What type of vulnerability is CVE-2025-2052?
CVE-2025-2052 is an SQL injection vulnerability affecting the /forgot-password.php file.
How do I fix CVE-2025-2052?
To fix CVE-2025-2052, sanitize and validate user input before processing it in SQL queries.
What software is affected by CVE-2025-2052?
CVE-2025-2052 affects PHPGurukul Apartment Visitors Management System version 1.0.
What could be the impact of exploiting CVE-2025-2052?
Exploiting CVE-2025-2052 could allow an attacker to execute arbitrary SQL queries in the database.