CVE-2025-3351: PHPGurukul Old Age Home Management System login.php sql injection

Published Apr 7, 2025

Updated

A vulnerability has been found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Old Age Home Management System

Phpgurukul Old Age Home Management System=1.0

Event History

Apr 7, 2025

CVE Published

via MITRE·12:00 PM

Data Sourced

via MITRE·12:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-3351?

CVE-2025-3351 is classified as a critical severity vulnerability.

What type of vulnerability is CVE-2025-3351?

CVE-2025-3351 is an SQL injection vulnerability found in the Old Age Home Management System.

How do I fix CVE-2025-3351?

To fix CVE-2025-3351, validate and sanitize input for the Username field in /admin/login.php.

Which system is affected by CVE-2025-3351?

CVE-2025-3351 affects PHPGurukul Old Age Home Management System version 1.0.

What is the impact of CVE-2025-3351?

The impact of CVE-2025-3351 is that it allows attackers to execute arbitrary SQL queries on the database.