CVE-2025-4004: PHPGurukul COVID19 Testing Management System password-recovery.php sql injection
A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /password-recovery.php. The manipulation of the argument username/contactno leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4004?
CVE-2025-4004 is classified as a critical vulnerability.
How does CVE-2025-4004 impact the PHPGurukul COVID19 Testing Management System?
CVE-2025-4004 leads to SQL injection through manipulation of the 'contactno' argument in the /password-recovery.php file.
Who is affected by CVE-2025-4004?
CVE-2025-4004 affects users of PHPGurukul COVID19 Testing Management System version 1.0.
How can I fix CVE-2025-4004?
To mitigate CVE-2025-4004, ensure proper input validation and parameterized queries in the affected PHP file.
What kind of attack can CVE-2025-4004 facilitate?
CVE-2025-4004 can facilitate SQL injection attacks, allowing unauthorized access to the database.