CVE-2025-3235: PHPGurukul Old Age Home Management System profile.php sql injection

Published Apr 4, 2025

Updated

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/profile.php. The manipulation of the argument adminname/contactnumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Old Age Home Management System

Phpgurukul Old Age Home Management System=1.0

Event History

Apr 4, 2025

CVE Published

via MITRE·09:31 AM

Data Sourced

via MITRE·09:31 AM

DescriptionSeverityWeakness

Apr 20, 57343

Event

via NVD·10:10 PM

Frequently Asked Questions

What is the severity of CVE-2025-3235?

CVE-2025-3235 has been classified as a critical vulnerability.

What type of vulnerability is CVE-2025-3235?

CVE-2025-3235 is an SQL injection vulnerability affecting the /admin/profile.php file of the PHPGurukul Old Age Home Management System.

How do I fix CVE-2025-3235?

To fix CVE-2025-3235, sanitize and validate all user inputs, especially the adminname parameter, before using them in SQL queries.

What systems are affected by CVE-2025-3235?

CVE-2025-3235 affects the PHPGurukul Old Age Home Management System version 1.0.

Can CVE-2025-3235 be exploited remotely?

Yes, CVE-2025-3235 can be exploited remotely, allowing attackers to execute SQL injection attacks from outside the system.