CVE-2025-4917: PHPGurukul Auto Taxi Stand Management System new-autoortaxi-entry-form.php sql injection
A vulnerability classified as critical has been found in PHPGurukul Auto Taxi Stand Management System 1.0. Affected is an unknown function of the file /admin/new-autoortaxi-entry-form.php. The manipulation of the argument drivername leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4917?
CVE-2025-4917 is classified as a critical vulnerability.
What type of vulnerability is CVE-2025-4917?
CVE-2025-4917 is an SQL injection vulnerability affecting the PHPGurukul Auto Taxi Stand Management System.
How does the SQL injection occur in CVE-2025-4917?
The SQL injection in CVE-2025-4917 occurs through improper handling of the 'drivername' argument in the file /admin/new-autoortaxi-entry-form.php.
How do I fix CVE-2025-4917?
To fix CVE-2025-4917, ensure proper validation and sanitization of user inputs and use prepared statements for database queries.
Which software is affected by CVE-2025-4917?
CVE-2025-4917 affects the PHPGurukul Auto Taxi Stand Management System version 1.0.