CVE-2025-4027: PHPGurukul Old Age Home Management System rules.php sql injection

Published Apr 28, 2025

Updated

A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/rules.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Old Age Home Management System

Phpgurukul Old Age Home Management System=1.0

Event History

Apr 28, 2025

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionSeverityWeakness

Jan 8, 57302

Event

via FIRST·12:13 PM

Frequently Asked Questions

What is the severity of CVE-2025-4027?

CVE-2025-4027 is classified as a critical vulnerability.

How does CVE-2025-4027 affect the PHPGurukul Old Age Home Management System?

CVE-2025-4027 allows for SQL injection through the manipulation of the 'pagetitle' argument in the file /admin/rules.php.

Can CVE-2025-4027 be exploited remotely?

Yes, CVE-2025-4027 can be exploited remotely.

What version of the software is vulnerable to CVE-2025-4027?

CVE-2025-4027 affects version 1.0 of PHPGurukul Old Age Home Management System.

How can I mitigate the risk associated with CVE-2025-4027?

To mitigate CVE-2025-4027, it is recommended to validate and sanitize all inputs, particularly for the 'pagetitle' parameter.