CVE-2025-4264: PHPGurukul Emergency Ambulance Hiring Portal edit-ambulance.php sql injection
A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/edit-ambulance.php. The manipulation of the argument dconnum leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4264?
CVE-2025-4264 is classified as a critical vulnerability.
How does CVE-2025-4264 affect PHPGurukul Emergency Ambulance Hiring Portal?
CVE-2025-4264 affects the file /admin/edit-ambulance.php and allows for SQL injection via the dconnum argument.
Can CVE-2025-4264 be exploited remotely?
Yes, CVE-2025-4264 can be exploited remotely, allowing attackers to execute SQL injection.
What are the potential consequences of exploiting CVE-2025-4264?
Exploiting CVE-2025-4264 can lead to unauthorized access to sensitive data in the database.
How can I fix CVE-2025-4264?
To fix CVE-2025-4264, it is recommended to sanitize the input parameters in the affected function and implement prepared statements.