CVE-2025-4060: PHPGurukul Notice Board System category.php sql injection
A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file /category.php. The manipulation of the argument catname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4060?
CVE-2025-4060 is classified as a critical vulnerability.
How does CVE-2025-4060 affect the Notice Board System?
CVE-2025-4060 allows for SQL injection through the manipulation of the catname argument in /category.php.
Can CVE-2025-4060 be exploited remotely?
Yes, the vulnerability can be exploited remotely.
What is the potential impact of CVE-2025-4060?
Successful exploitation of CVE-2025-4060 may lead to unauthorized access to the database and sensitive data.
How do I fix CVE-2025-4060 in PHPGurukul Notice Board System?
To mitigate CVE-2025-4060, ensure that all user inputs in the application are properly sanitized and validated.