CVE-2025-5638: PHPGurukul Notice Board System admin-profile.php sql injection
A vulnerability has been found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5638?
CVE-2025-5638 is classified as a critical vulnerability.
How does CVE-2025-5638 affect PHPGurukul Notice Board System?
CVE-2025-5638 affects the /admin-profile.php file, leading to SQL injection vulnerabilities through the mobilenumber argument.
What are the potential impacts of exploiting CVE-2025-5638?
Exploiting CVE-2025-5638 can allow attackers to manipulate the database, potentially leading to data breaches and unauthorized access.
How can I fix CVE-2025-5638?
To fix CVE-2025-5638, ensure proper input validation and use prepared statements for SQL queries to prevent SQL injection.
Is there a patch available for CVE-2025-5638 in PHPGurukul Notice Board System?
As of now, there is no official patch released for CVE-2025-5638, and users should implement mitigation strategies until a fix is provided.