CVE-2025-5657: PHPGurukul Complaint Management System manage-users.php sql injection

Published Jun 5, 2025

Updated

A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/manage-users.php. The manipulation of the argument uid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Complaint Management system

Phpgurukul Complaint Management system=2.0

Event History

Jun 5, 2025

CVE Published

via MITRE·12:00 PM

Data Sourced

via MITRE·12:00 PM

DescriptionSeverityWeakness

May 26, 57485

Event

via FIRST·02:44 AM

Frequently Asked Questions

What is the severity of CVE-2025-5657?

CVE-2025-5657 has been rated as critical due to its potential for remote SQL injection.

How do I fix CVE-2025-5657?

To fix CVE-2025-5657, it is recommended to validate and sanitize user inputs in the /admin/manage-users.php file.

Which software is affected by CVE-2025-5657?

CVE-2025-5657 affects PHPGurukul Complaint Management System version 2.0.

What types of attacks can occur due to CVE-2025-5657?

CVE-2025-5657 can allow attackers to execute SQL injection attacks remotely.

Where in the code is CVE-2025-5657 located?

CVE-2025-5657 is found in the processing of the uid argument in the /admin/manage-users.php file.