First published: Sun May 11 2025(Updated: )
A vulnerability, which was classified as critical, has been found in PHPGurukul Apartment Visitors Management System 1.0. This issue affects some unknown processing of the file /admin/pass-details.php. The manipulation of the argument pid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Projectworlds Apartment Visitors Management System | ||
Projectworlds Apartment Visitors Management System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2025-4550 has been classified as a critical vulnerability.
CVE-2025-4550 is an SQL injection vulnerability that affects the PHPGurukul Apartment Visitors Management System.
The file affected by CVE-2025-4550 is /admin/pass-details.php.
The vulnerability allows an attacker to manipulate the argument 'pid' to execute malicious SQL queries.
To fix CVE-2025-4550, it is recommended to sanitize user inputs and use prepared statements for database queries.