CVE-2025-5577: PHPGurukul Dairy Farm Shop Management System profile.php sql injection
A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System 1.3. Affected is an unknown function of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5577?
The severity of CVE-2025-5577 is classified as critical due to its potential for remote SQL injection.
How do I fix CVE-2025-5577?
To fix CVE-2025-5577, sanitize and validate user inputs, especially for the 'mobilenumber' parameter in the profile.php file.
What systems are affected by CVE-2025-5577?
CVE-2025-5577 affects the PHPGurukul Dairy Farm Shop Management System version 1.3.
What are the potential impacts of exploiting CVE-2025-5577?
Exploiting CVE-2025-5577 can lead to unauthorized access to the database and compromise sensitive data.
Is CVE-2025-5577 being actively exploited?
There have been reports of CVE-2025-5577 being actively exploited in the wild, making immediate mitigation paramount.