CVE-2025-5210: PHPGurukul Employee Record Management System loginerms.php sql injection
Published May 26, 2025
·Updated
A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This vulnerability affects unknown code of the file /loginerms.php. The manipulation of the argument Email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Phpgurukul Employee Record Management System
Phpgurukul Employee Record Management System=1.3
Event History
May 26, 2025
CVE Published
via MITRE·10:31 PM
Data Sourced
via MITRE·10:31 PM
DescriptionSeverityWeakness
Jun 23, 57411
Event
via FIRST·06:10 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-5210?
CVE-2025-5210 is classified as a critical vulnerability.
2
What vulnerability type is CVE-2025-5210?
CVE-2025-5210 is an SQL injection vulnerability.
3
How does CVE-2025-5210 affect the system?
CVE-2025-5210 allows remote attackers to manipulate the Email argument to execute SQL injection attacks.
4
What is the affected software for CVE-2025-5210?
CVE-2025-5210 affects the PHPGurukul Employee Record Management System version 1.3.
5
How can I mitigate CVE-2025-5210?
To mitigate CVE-2025-5210, sanitize input data and use prepared statements to prevent SQL injection.