CVE-2025-5574: PHPGurukul Dairy Farm Shop Management System add-company.php sql injection

Published Jun 4, 2025

Updated

A vulnerability classified as critical has been found in PHPGurukul Dairy Farm Shop Management System 1.3. This affects an unknown part of the file /add-company.php. The manipulation of the argument companyname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Dairy Farm Shop Management System

Phpgurukul Dairy Farm Shop Management System=1.3

Event History

Jun 4, 2025

CVE Published

via MITRE·06:31 AM

Data Sourced

via MITRE·06:31 AM

DescriptionSeverityWeakness

Aug 30, 57482

Event

via FIRST·05:03 PM

Frequently Asked Questions

What is the severity of CVE-2025-5574?

CVE-2025-5574 has been classified as a critical vulnerability.

How does CVE-2025-5574 exploit SQL injection?

CVE-2025-5574 exploits an SQL injection vulnerability through improper handling of the 'companyname' parameter in the /add-company.php file.

Can CVE-2025-5574 be exploited remotely?

Yes, CVE-2025-5574 can be exploited remotely, allowing attackers to perform SQL injection attacks.

Are all versions of PHPGurukul Dairy Farm Shop Management System affected by CVE-2025-5574?

CVE-2025-5574 affects PHPGurukul Dairy Farm Shop Management System version 1.3 specifically.

How do I fix CVE-2025-5574?

To fix CVE-2025-5574, sanitize and validate all user inputs, particularly the 'companyname' parameter to prevent SQL injection.