CVE-2025-5553: PHPGurukul Rail Pass Management System download-pass.php sql injection
A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /download-pass.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5553?
CVE-2025-5553 is classified as a critical vulnerability affecting the PHPGurukul Rail Pass Management System.
How do I fix CVE-2025-5553?
To fix CVE-2025-5553, sanitize user inputs in the /download-pass.php file to prevent SQL injection attacks.
What type of vulnerability is CVE-2025-5553?
CVE-2025-5553 is an SQL injection vulnerability that allows attackers to manipulate queries by altering the searchdata argument.
Which software is affected by CVE-2025-5553?
CVE-2025-5553 affects version 1.0 of the PHPGurukul Rail Pass Management System.
Can CVE-2025-5553 be exploited remotely?
Yes, CVE-2025-5553 can be exploited remotely by launching an attack on the affected /download-pass.php file.