CVE-2025-5578: PHPGurukul Dairy Farm Shop Management System sales-report-details.php sql injection

Published Jun 4, 2025

Updated

A vulnerability has been found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sales-report-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Dairy Farm Shop Management System

Phpgurukul Dairy Farm Shop Management System=1.3

Event History

Jun 4, 2025

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

DescriptionSeverityWeakness

Jan 12, 57458

Event

via FIRST·11:20 AM

Frequently Asked Questions

What is the severity of CVE-2025-5578?

CVE-2025-5578 is classified as critical due to its potential for SQL injection.

How does CVE-2025-5578 affect the Dairy Farm Shop Management System?

CVE-2025-5578 allows attackers to manipulate the 'fromdate' and 'todate' parameters in the /sales-report-details.php file, leading to SQL injection.

What type of vulnerability is CVE-2025-5578?

CVE-2025-5578 is an SQL injection vulnerability.

How do I fix CVE-2025-5578?

To fix CVE-2025-5578, ensure proper input validation and sanitization for the 'fromdate' and 'todate' parameters in your application.

Which version of the Dairy Farm Shop Management System is affected by CVE-2025-5578?

CVE-2025-5578 affects version 1.3 of the PHPGurukul Dairy Farm Shop Management System.