CVE-2025-2687: PHPGurukul eLearning System Image index.php unrestricted upload
First published: Mon Mar 24 2025(Updated: )
A vulnerability classified as critical has been found in PHPGurukul eLearning System 1.0. Affected is an unknown function of the file /user/index.php of the component Image Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PHPGurukul eLearning System | ||
| PHPGurukul eLearning System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-2687?
CVE-2025-2687 is classified as a critical vulnerability.
How does CVE-2025-2687 affect the PHPGurukul eLearning System?
CVE-2025-2687 affects the Image Handler component of the PHPGurukul eLearning System, allowing for unrestricted file uploads.
What is the impact of exploiting CVE-2025-2687?
Exploiting CVE-2025-2687 may lead to the remote execution of arbitrary code due to unauthorized file uploads.
How can I mitigate CVE-2025-2687?
To mitigate CVE-2025-2687, ensure that file upload functionality has strict file type and size restrictions.
Is there a patch available for CVE-2025-2687?
As of now, the developers have not released a patch for CVE-2025-2687, so users should implement workarounds to secure their systems.
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/references
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/author
- agent/source
- agent/severity
- agent/tags
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- collector/nvd-api
- source/NVD
- collector/mitre-cve
- source/MITRE
- vendor/phpgurukul
- canonical/phpgurukul elearning system
- version/phpgurukul elearning system/1.0