CVE-2025-3217: PHPGurukul e-Diary Management System registration.php sql injection
A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /registration.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3217?
CVE-2025-3217 has been declared as critical due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-3217?
To mitigate CVE-2025-3217, ensure input validation and parameterized queries in the /registration.php file.
What impact does CVE-2025-3217 have on PHPGurukul e-Diary Management System?
CVE-2025-3217 allows attackers to execute arbitrary SQL commands through the emailid parameter, compromising the database.
Can CVE-2025-3217 be exploited remotely?
Yes, CVE-2025-3217 can be exploited remotely, making it a significant threat to users of the affected system.
What versions of PHPGurukul e-Diary Management System are affected by CVE-2025-3217?
CVE-2025-3217 affects version 1.0 of the PHPGurukul e-Diary Management System.