CVE-2025-4164: PHPGurukul Employee Record Management System changepassword.php sql injection
A vulnerability, which was classified as critical, was found in PHPGurukul Employee Record Management System 1.3. Affected is an unknown function of the file changepassword.php. The manipulation of the argument currentpassword leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4164?
CVE-2025-4164 is classified as a critical vulnerability.
How do I fix CVE-2025-4164?
To fix CVE-2025-4164, ensure that input validation is properly implemented to prevent SQL injection.
What component is affected by CVE-2025-4164?
CVE-2025-4164 affects the 'changepassword.php' file in the PHPGurukul Employee Record Management System.
What type of vulnerability is CVE-2025-4164?
CVE-2025-4164 is an SQL injection vulnerability that exploits the 'currentpassword' parameter.
Is CVE-2025-4164 present in all versions of the Software?
CVE-2025-4164 specifically affects the PHPGurukul Employee Record Management System version 1.3.