CVE-2025-4697: PHPGurukul Directory Management System edit-directory.php sql injection
A vulnerability was found in PHPGurukul Directory Management System 2.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/edit-directory.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4697?
CVE-2025-4697 has been rated as critical due to its potential for SQL injection.
How do I fix CVE-2025-4697?
To fix CVE-2025-4697, it is recommended to implement input validation and sanitize user inputs for the editid parameter in file /admin/edit-directory.php.
What systems are affected by CVE-2025-4697?
CVE-2025-4697 affects the PHPGurukul Directory Management System version 2.0.
What kind of attack can CVE-2025-4697 facilitate?
CVE-2025-4697 can facilitate SQL injection attacks through the manipulation of the editid parameter.
Is there a known exploitation method for CVE-2025-4697?
Yes, the vulnerability can be exploited by altering the editid argument in the request to execute arbitrary SQL commands.