CVE-2025-5576: PHPGurukul Dairy Farm Shop Management System bwdate-report-details.php sql injection

Published Jun 4, 2025

Updated

A vulnerability, which was classified as critical, has been found in PHPGurukul Dairy Farm Shop Management System 1.3. This issue affects some unknown processing of the file /bwdate-report-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Dairy Farm Shop Management System

Phpgurukul Dairy Farm Shop Management System=1.3

Event History

Jun 4, 2025

CVE Published

via MITRE·07:31 AM

Data Sourced

via MITRE·07:31 AM

DescriptionSeverityWeakness

Aug 30, 57482

Event

via FIRST·06:01 AM

Frequently Asked Questions

What is the severity of CVE-2025-5576?

CVE-2025-5576 is classified as a critical vulnerability.

How can I fix CVE-2025-5576?

To fix CVE-2025-5576, you should sanitize the input parameters of fromdate and todate in the /bwdate-report-details.php file to prevent SQL injection.

What systems are affected by CVE-2025-5576?

CVE-2025-5576 affects the PHPGurukul Dairy Farm Shop Management System version 1.3.

What type of vulnerability is CVE-2025-5576?

CVE-2025-5576 is an SQL injection vulnerability that can be exploited through improper parameter handling.

What are the consequences of exploiting CVE-2025-5576?

Exploiting CVE-2025-5576 can lead to unauthorized access to the database and potential data leakage.