CVE-2025-2373: PHPGurukul Human Metapneumovirus Testing Management System check_availability.php sql injection

Published Mar 17, 2025

Updated

A vulnerability classified as critical was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This vulnerability affects unknown code of the file /checkavailability.php. The manipulation of the argument mobnumber/employeeid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Human Metapneumovirus Testing Management System

Phpgurukul Human Metapneumovirus Testing Management System=1.0

Event History

Mar 17, 2025

CVE Published

via MITRE·10:31 AM

Data Sourced

via MITRE·10:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-2373?

CVE-2025-2373 is classified as a critical vulnerability.

How does CVE-2025-2373 affect the PHPGurukul Human Metapneumovirus Testing Management System?

CVE-2025-2373 affects the /check_availability.php file through SQL injection vulnerabilities.

What kind of attacks can be executed using CVE-2025-2373?

Attackers can exploit CVE-2025-2373 to perform SQL injection attacks.

Who is affected by CVE-2025-2373?

Anyone using PHPGurukul Human Metapneumovirus Testing Management System 1.0 is affected by CVE-2025-2373.

How can I mitigate the risks associated with CVE-2025-2373?

To mitigate CVE-2025-2373, it is recommended to sanitize and validate inputs, and apply patches or updates provided by PHPGurukul.