CVE-2025-3265: PHPGurukul e-Diary Management System add-category.php sql injection
A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-category.php. The manipulation of the argument Category leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3265?
CVE-2025-3265 is classified as a critical vulnerability.
How does CVE-2025-3265 affect the PHPGurukul e-Diary Management System?
CVE-2025-3265 allows for SQL injection through the manipulation of the 'Category' argument in the /add-category.php file.
Can CVE-2025-3265 be exploited remotely?
Yes, CVE-2025-3265 can be exploited remotely.
What versions of the PHPGurukul e-Diary Management System are vulnerable to CVE-2025-3265?
PHPGurukul e-Diary Management System version 1.0 is affected by CVE-2025-3265.
What mitigation steps should be taken for CVE-2025-3265?
To fix CVE-2025-3265, sanitize and validate all inputs to the /add-category.php file to prevent SQL injection.