CVE-2025-3974: PHPGurukul COVID19 Testing Management System edit-phlebotomist.php sql injection
A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /edit-phlebotomist.php?pid=11. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3974?
CVE-2025-3974 is classified as a critical vulnerability.
How does CVE-2025-3974 affect the PHPGurukul COVID19 Testing Management System?
CVE-2025-3974 allows for SQL injection through the 'mobilenumber' argument in the /edit-phlebotomist.php file.
What can attackers do by exploiting CVE-2025-3974?
By exploiting CVE-2025-3974, attackers can manipulate database queries and potentially access or alter sensitive data.
How do I fix CVE-2025-3974?
To fix CVE-2025-3974, sanitize and validate user inputs to prevent SQL injection in the affected file.
Is there a patch available for CVE-2025-3974?
As of now, there is no official patch available for CVE-2025-3974, and it is advised to implement workarounds such as input validation.