CVE-2025-5575: PHPGurukul Dairy Farm Shop Management System add-product.php sql injection

Published Jun 4, 2025

Updated

A vulnerability classified as critical was found in PHPGurukul Dairy Farm Shop Management System 1.3. This vulnerability affects unknown code of the file /add-product.php. The manipulation of the argument productname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Dairy Farm Shop Management System

Phpgurukul Dairy Farm Shop Management System=1.3

Event History

Jun 4, 2025

CVE Published

via MITRE·07:00 AM

Data Sourced

via MITRE·07:00 AM

DescriptionSeverityWeakness

Aug 30, 57482

Event

via FIRST·05:02 PM

Frequently Asked Questions

What is the severity of CVE-2025-5575?

CVE-2025-5575 is classified as a critical severity vulnerability.

How does CVE-2025-5575 exploit the system?

CVE-2025-5575 can be exploited through SQL injection by manipulating the productname argument in the /add-product.php file.

What software is affected by CVE-2025-5575?

CVE-2025-5575 affects the PHPGurukul Dairy Farm Shop Management System version 1.3.

Can CVE-2025-5575 be exploited remotely?

Yes, CVE-2025-5575 can be exploited remotely.

How do I fix CVE-2025-5575?

To fix CVE-2025-5575, you should validate and sanitize the input for the productname argument in the /add-product.php file.