CVE-2025-5368: PHPGurukul Daily Expense Tracker System expense-yearwise-reports-detailed.php sql injection

Published May 31, 2025

Updated

A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. This issue affects some unknown processing of the file /expense-yearwise-reports-detailed.php. The manipulation of the argument todate leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Daily Expense Tracker System

Phpgurukul Daily Expense Tracker System=1.1

Event History

May 31, 2025

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

DescriptionSeverityWeakness

Jan 17, 57395

Event

via FIRST·04:45 PM

Frequently Asked Questions

What is the severity of CVE-2025-5368?

CVE-2025-5368 has been rated as critical due to SQL injection vulnerabilities.

How do I fix CVE-2025-5368?

To fix CVE-2025-5368, sanitize the input parameters to prevent SQL injection in the /expense-yearwise-reports-detailed.php file.

What type of vulnerability is CVE-2025-5368?

CVE-2025-5368 is a SQL injection vulnerability affecting the PHPGurukul Daily Expense Tracker System.

What is affected by CVE-2025-5368?

CVE-2025-5368 affects the PHPGurukul Daily Expense Tracker System 1.1, specifically the processing of the argument 'todate'.

Can CVE-2025-5368 be exploited remotely?

Yes, CVE-2025-5368 can be exploited remotely through crafted requests to the vulnerable file.