CVE-2025-3187: PHPGurukul e-Diary Management System login.php sql injection
A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument logindetail leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3187?
CVE-2025-3187 has been rated as critical due to its potential for SQL injection.
How does CVE-2025-3187 affect the PHPGurukul e-Diary Management System?
CVE-2025-3187 affects the login functionality in PHPGurukul e-Diary Management System 1.0, enabling SQL injection through the logindetail argument.
Can CVE-2025-3187 be exploited remotely?
Yes, CVE-2025-3187 can be exploited remotely, allowing attackers to manipulate the affected parameter.
What are the potential consequences of exploiting CVE-2025-3187?
Exploiting CVE-2025-3187 may allow attackers to execute arbitrary SQL commands, leading to unauthorized data access or manipulation.
How can I protect my PHPGurukul e-Diary Management System from CVE-2025-3187?
To protect against CVE-2025-3187, validate and sanitize all user inputs, and apply security patches provided by the vendor.