CVE-2025-4698: PHPGurukul Directory Management System forget-password.php sql injection
A vulnerability classified as critical has been found in PHPGurukul Directory Management System 2.0. This affects an unknown part of the file /admin/forget-password.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4698?
CVE-2025-4698 is classified as a critical vulnerability.
How do I fix CVE-2025-4698?
To fix CVE-2025-4698, update the PHPGurukul Directory Management System to the latest version that addresses this vulnerability.
What type of vulnerability is CVE-2025-4698?
CVE-2025-4698 is a SQL injection vulnerability that can be exploited remotely.
What file is affected by CVE-2025-4698?
CVE-2025-4698 affects the /admin/forget-password.php file in the PHPGurukul Directory Management System.
What can an attacker do with CVE-2025-4698?
An attacker can manipulate the email argument in /admin/forget-password.php to execute SQL injection attacks.