CVE-2025-4020: PHPGurukul Old Age Home Management System contact.php sql injection
Published Apr 28, 2025
·Updated
A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /contact.php. The manipulation of the argument fname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
2 affected components
Phpgurukul Old Age Home Management System
Phpgurukul Old Age Home Management System=1.0
Event History
Apr 28, 2025
CVE Published
via MITRE·12:31 PM
Data Sourced
via MITRE·12:31 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-4020?
CVE-2025-4020 is classified as a critical vulnerability.
2
What type of vulnerability is CVE-2025-4020?
CVE-2025-4020 is a SQL injection vulnerability.
3
How can I mitigate CVE-2025-4020?
To mitigate CVE-2025-4020, validate and sanitize user inputs in the /contact.php file.
4
Who is affected by CVE-2025-4020?
CVE-2025-4020 affects the PHPGurukul Old Age Home Management System version 1.0.
5
Can CVE-2025-4020 be exploited remotely?
Yes, CVE-2025-4020 can be exploited remotely.