CVE-2025-25389: SQL Injection
A SQL Injection vulnerability was found in /admin/forgot-password.php in Phpgurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the contactno POST request parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-25389?
CVE-2025-25389 is classified as a critical SQL Injection vulnerability that can lead to remote code execution.
How do I fix CVE-2025-25389?
To fix CVE-2025-25389, sanitize and validate all user input, particularly the contactno POST request parameter in the /admin/forgot-password.php file.
Who is affected by CVE-2025-25389?
CVE-2025-25389 affects Phpgurukul Land Record System version 1.0.
What is SQL Injection in the context of CVE-2025-25389?
In the context of CVE-2025-25389, SQL Injection allows attackers to manipulate SQL queries by providing malicious input through the contactno parameter.
Can CVE-2025-25389 be exploited remotely?
Yes, CVE-2025-25389 can be exploited remotely by attackers with access to the vulnerable /admin/forgot-password.php script.