CVE-2025-4163: PHPGurukul Land Record System aboutus.php sql injection
Published May 1, 2025
·Updated
A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0. This issue affects some unknown processing of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
2 affected components
Phpgurukul Land Record System
Phpgurukul Land Record System=1.0
Event History
May 1, 2025
CVE Published
via MITRE·11:31 AM
Data Sourced
via MITRE·11:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-4163?
CVE-2025-4163 is classified as a critical vulnerability.
2
What type of vulnerability is CVE-2025-4163?
CVE-2025-4163 is a SQL injection vulnerability.
3
How does CVE-2025-4163 affect the PHPGurukul Land Record System?
CVE-2025-4163 allows attackers to manipulate the pagetitle argument in /admin/aboutus.php to execute SQL queries.
4
Is CVE-2025-4163 exploitable remotely?
Yes, CVE-2025-4163 can be exploited remotely.
5
How can I fix the vulnerability identified as CVE-2025-4163?
To fix CVE-2025-4163, validate and sanitize user inputs to prevent SQL injection.