CVE-2025-5656: PHPGurukul Complaint Management System edit-category.php sql injection

Published Jun 5, 2025

Updated

A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-category.php. The manipulation of the argument description leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Complaint Management system

Phpgurukul Complaint Management system=2.0

Event History

Jun 5, 2025

CVE Published

via MITRE·11:31 AM

Data Sourced

via MITRE·11:31 AM

DescriptionSeverityWeakness

May 26, 57485

Event

via FIRST·04:55 AM

Frequently Asked Questions

What is the severity of CVE-2025-5656?

CVE-2025-5656 is classified as a critical severity vulnerability due to its potential for SQL injection.

How do I fix CVE-2025-5656?

To fix CVE-2025-5656, validate and sanitize user input in the /admin/edit-category.php file to prevent SQL injection.

What type of vulnerability is CVE-2025-5656?

CVE-2025-5656 is a SQL injection vulnerability that allows attackers to manipulate database queries.

Which application is affected by CVE-2025-5656?

CVE-2025-5656 affects the PHPGurukul Complaint Management System version 2.0.

What is the attack vector for CVE-2025-5656?

The attack vector for CVE-2025-5656 involves manipulating the 'description' argument in the /admin/edit-category.php file.