CVE-2025-4039: PHPGurukul Rail Pass Management System search-pass.php sql injection
A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/search-pass.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4039?
CVE-2025-4039 has been rated as critical due to its potential impact.
How do I fix CVE-2025-4039?
To fix CVE-2025-4039, validate and sanitize the input for the searchdata parameter in /admin/search-pass.php.
What type of vulnerability is CVE-2025-4039?
CVE-2025-4039 is classified as an SQL injection vulnerability.
Which software is affected by CVE-2025-4039?
CVE-2025-4039 affects PHPGurukul Rail Pass Management System version 1.0.
What can attackers do with CVE-2025-4039?
Attackers can exploit CVE-2025-4039 to execute arbitrary SQL queries against the database.