CVE-2025-25462: SQL Injection
A SQL Injection vulnerability was found in /admin/add-propertytype.php in PHPGurukul Land Record System Project in PHP v1.0 allows remote attackers to execute arbitrary code via the propertytype POST request parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-25462?
The severity of CVE-2025-25462 is considered high due to the potential for remote code execution through SQL injection.
How do I fix CVE-2025-25462?
To fix CVE-2025-25462, validate and sanitize all user inputs, particularly the propertytype POST request parameter to prevent SQL injection.
What systems are affected by CVE-2025-25462?
CVE-2025-25462 affects PHPGurukul Land Record System Project version 1.0 and any environment where PHP is used without proper input validations.
Can CVE-2025-25462 be exploited remotely?
Yes, CVE-2025-25462 can be exploited remotely by sending specially crafted requests to the affected PHP script.
What is SQL Injection in the context of CVE-2025-25462?
SQL Injection in the context of CVE-2025-25462 refers to an attacker manipulating SQL queries through the propertytype POST request, allowing execution of arbitrary code.