CVE-2025-4074: PHPGurukul Curfew e-Pass Management System pass-bwdates-report.php sql injection
A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/pass-bwdates-report.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4074?
CVE-2025-4074 has been declared as critical due to its potential for SQL injection.
How does CVE-2025-4074 affect the PHPGurukul Curfew e-Pass Management System?
CVE-2025-4074 affects the file /admin/pass-bwdates-report.php by allowing manipulation of the fromdate/todate arguments.
What type of vulnerability is CVE-2025-4074?
CVE-2025-4074 is an SQL injection vulnerability.
What are the potential impacts of exploiting CVE-2025-4074?
Exploitation of CVE-2025-4074 could lead to unauthorized access to the database and manipulation of sensitive data.
How can I mitigate CVE-2025-4074 in my application?
Mitigation of CVE-2025-4074 can be achieved by validating and sanitizing user input before processing database queries.