CVE-2025-4264: PHPGurukul Emergency Ambulance Hiring Portal edit-ambulance.php sql injection
First published: Mon May 05 2025(Updated: )
A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/edit-ambulance.php. The manipulation of the argument dconnum leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PHPGurukul Emergency Ambulance Hiring Portal |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-4264?
CVE-2025-4264 is classified as a critical vulnerability.
How does CVE-2025-4264 affect PHPGurukul Emergency Ambulance Hiring Portal?
CVE-2025-4264 affects the file /admin/edit-ambulance.php and allows for SQL injection via the dconnum argument.
Can CVE-2025-4264 be exploited remotely?
Yes, CVE-2025-4264 can be exploited remotely, allowing attackers to execute SQL injection.
What are the potential consequences of exploiting CVE-2025-4264?
Exploiting CVE-2025-4264 can lead to unauthorized access to sensitive data in the database.
How can I fix CVE-2025-4264?
To fix CVE-2025-4264, it is recommended to sanitize the input parameters in the affected function and implement prepared statements.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/weakness
- agent/type
- agent/description
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/author
- agent/source
- agent/tags
- agent/severity
- agent/event
- vendor/phpgurukul
- canonical/phpgurukul emergency ambulance hiring portal