CVE-2025-4938: PHPGurukul Employee Record Management System registererms.php sql injection
A vulnerability was found in PHPGurukul Employee Record Management System 1.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /registererms.php. The manipulation of the argument Email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4938?
CVE-2025-4938 has been rated as critical due to its potential for SQL injection.
How do I fix CVE-2025-4938?
To fix CVE-2025-4938, validate and sanitize the user input in the Email field of the /registererms.php file.
What software is affected by CVE-2025-4938?
CVE-2025-4938 affects the PHPGurukul Employee Record Management System version 1.3.
What type of vulnerability is CVE-2025-4938?
CVE-2025-4938 is classified as an SQL injection vulnerability.
Can CVE-2025-4938 be exploited remotely?
Yes, CVE-2025-4938 can be exploited remotely if the attacker manipulates the Email parameter in the affected file.