CVE-2025-5653: PHPGurukul Complaint Management System between-date-userreport.php sql injection

Published Jun 5, 2025

Updated

A vulnerability has been found in PHPGurukul Complaint Management System 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/between-date-userreport.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Complaint Management system

Phpgurukul Complaint Management system=2.0

Event History

Jun 5, 2025

CVE Published

via MITRE·10:31 AM

Data Sourced

via MITRE·10:31 AM

DescriptionSeverityWeakness

May 26, 57485

Event

via FIRST·07:31 AM

Frequently Asked Questions

What is the severity of CVE-2025-5653?

CVE-2025-5653 is classified as a critical vulnerability.

How does CVE-2025-5653 affect PHPGurukul Complaint Management System?

CVE-2025-5653 allows for SQL injection through the manipulation of the fromdate/todate arguments in the file /admin/between-date-userreport.php.

How do I fix CVE-2025-5653?

To fix CVE-2025-5653, validate and sanitize user inputs associated with fromdate and todate to prevent SQL injection.

What systems are vulnerable to CVE-2025-5653?

CVE-2025-5653 affects PHPGurukul Complaint Management System version 2.0.

Are there any known exploits for CVE-2025-5653?

Yes, CVE-2025-5653 is susceptible to SQL injection attacks, which can be exploited by manipulating the input parameters.