CVE-2025-5652: PHPGurukul Complaint Management System between-date-complaintreport.php sql injection

Published Jun 5, 2025

Updated

A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 2.0. Affected is an unknown function of the file /admin/between-date-complaintreport.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Complaint Management system

Phpgurukul Complaint Management system=2.0

Event History

Jun 5, 2025

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

DescriptionSeverityWeakness

May 26, 57485

Event

via FIRST·09:51 AM

Frequently Asked Questions

What is the severity of CVE-2025-5652?

CVE-2025-5652 is classified as a critical vulnerability.

How does CVE-2025-5652 affect the PHPGurukul Complaint Management System?

CVE-2025-5652 allows for SQL injection through manipulation of the 'fromdate' and 'todate' parameters in the file /admin/between-date-complaintreport.php.

How can I fix CVE-2025-5652?

To fix CVE-2025-5652, ensure proper validation and sanitization of user inputs in the affected PHP files.

Which version of the software is affected by CVE-2025-5652?

CVE-2025-5652 affects the PHPGurukul Complaint Management System version 2.0.

What are the potential consequences of exploiting CVE-2025-5652?

Exploiting CVE-2025-5652 can lead to unauthorized access to the database and potentially sensitive information.