CVE-2025-5654: PHPGurukul Complaint Management System edit-state.php sql injection

Published Jun 5, 2025

Updated

A vulnerability was found in PHPGurukul Complaint Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-state.php. The manipulation of the argument description leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Complaint Management system

Phpgurukul Complaint Management system=2.0

Event History

Jun 5, 2025

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

DescriptionSeverityWeakness

May 26, 57485

Event

via FIRST·01:10 PM

Frequently Asked Questions

What is the severity of CVE-2025-5654?

CVE-2025-5654 is classified as a critical vulnerability affecting PHPGurukul Complaint Management System 2.0.

How do I fix CVE-2025-5654?

To fix CVE-2025-5654, update PHPGurukul Complaint Management System to the latest version that includes patches for SQL injection vulnerabilities.

What type of vulnerability is CVE-2025-5654?

CVE-2025-5654 is an SQL injection vulnerability found in the /admin/edit-state.php file.

What could an attacker do with CVE-2025-5654?

An attacker could exploit CVE-2025-5654 to manipulate input parameters and execute arbitrary SQL commands.

Which software is affected by CVE-2025-5654?

CVE-2025-5654 affects PHPGurukul Complaint Management System version 2.0.