CVE-2025-4152: PHPGurukul Online Birth Certificate System bwdates-reports-details.php sql injection
First published: Thu May 01 2025(Updated: )
A vulnerability classified as critical has been found in PHPGurukul Online Birth Certificate System 1.0. Affected is an unknown function of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Online Birth Certificate System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-4152?
CVE-2025-4152 is classified as a critical vulnerability.
How does CVE-2025-4152 affect the PHPGurukul Online Birth Certificate System?
CVE-2025-4152 affects an unknown function in the /admin/bwdates-reports-details.php file, leading to a SQL injection vulnerability.
What are the potential consequences of exploiting CVE-2025-4152?
Exploitation of CVE-2025-4152 can allow attackers to manipulate database queries, potentially leading to unauthorized access or data leakage.
How can I mitigate the risks associated with CVE-2025-4152?
To mitigate CVE-2025-4152, update the PHPGurukul Online Birth Certificate System to a patched version that resolves the SQL injection vulnerability.
What input does CVE-2025-4152 specifically target?
CVE-2025-4152 specifically targets the 'fromdate' argument in the affected PHP file.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/type
- agent/description
- agent/title
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/author
- agent/severity
- agent/event
- collector/epss-latest
- source/FIRST
- agent/source
- agent/tags
- agent/epss
- vendor/phpgurukul
- canonical/online birth certificate system