CVE-2025-3215: PHPGurukul Restaurant Table Booking System add-subadmin.php sql injection
A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php. The manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3215?
CVE-2025-3215 is classified as critical due to the potential for SQL injection vulnerabilities.
What component of the PHPGurukul Restaurant Table Booking System is affected by CVE-2025-3215?
CVE-2025-3215 affects the /admin/add-subadmin.php file in the PHPGurukul Restaurant Table Booking System.
How does CVE-2025-3215 affect the system?
CVE-2025-3215 allows for SQL injection through manipulation of the fullname argument.
How can I fix CVE-2025-3215?
To fix CVE-2025-3215, sanitize and validate all user inputs to prevent SQL injection.
Is there a patch available for CVE-2025-3215?
At the moment, there is no specific patch mentioned for CVE-2025-3215, but users should follow security best practices.