CVE-2025-4176: PHPGurukul Blood Bank & Donor Management System request-received-bydonar.php sql injection
A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as critical. This vulnerability affects unknown code of the file /admin/request-received-bydonar.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4176?
CVE-2025-4176 is classified as critical due to its potential for SQL injection vulnerabilities.
How do I fix CVE-2025-4176?
To fix CVE-2025-4176, sanitize and validate input to the 'searchdata' argument in the /admin/request-received-bydonar.php file.
What software is affected by CVE-2025-4176?
CVE-2025-4176 affects PHPGurukul Blood Bank & Donor Management System version 2.4.
What type of attacks can CVE-2025-4176 lead to?
CVE-2025-4176 can lead to SQL injection attacks which may compromise the database.
Is there a workaround for CVE-2025-4176?
A potential workaround for CVE-2025-4176 is to implement strong input validation and prepare SQL statements.