CVE-2025-5579: PHPGurukul Dairy Farm Shop Management System search-product.php sql injection

Published Jun 4, 2025

Updated

A vulnerability was found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this issue is some unknown functionality of the file /search-product.php. The manipulation of the argument productname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Dairy Farm Shop Management System

Phpgurukul Dairy Farm Shop Management System=1.3

Event History

Jun 4, 2025

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

DescriptionSeverityWeakness

Jan 12, 57458

Event

via FIRST·10:30 AM

Frequently Asked Questions

What is the severity of CVE-2025-5579?

CVE-2025-5579 is classified as a critical vulnerability.

How does CVE-2025-5579 affect the PHPGurukul Dairy Farm Shop Management System?

CVE-2025-5579 affects the file /search-product.php, where SQL injection can be exploited through the productname parameter.

What are the potential consequences of exploiting CVE-2025-5579?

Successful exploitation of CVE-2025-5579 could allow attackers to execute arbitrary SQL commands in the database.

How do I fix CVE-2025-5579 in my PHPGurukul Dairy Farm Shop Management System?

To fix CVE-2025-5579, validate and sanitize user inputs in the /search-product.php file to prevent SQL injection.

Is CVE-2025-5579 present in all versions of PHPGurukul Dairy Farm Shop Management System?

CVE-2025-5579 specifically affects version 1.3 of the PHPGurukul Dairy Farm Shop Management System.