CVE-2025-5660: PHPGurukul Complaint Management System register-complaint.php sql injection

Published Jun 5, 2025

Updated

A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 2.0. Affected by this issue is some unknown functionality of the file /user/register-complaint.php. The manipulation of the argument noc leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Complaint Management system

Phpgurukul Complaint Management system=2.0

Event History

Jun 5, 2025

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionSeverityWeakness

Jan 12, 57458

Event

via FIRST·06:45 AM

Frequently Asked Questions

What is the severity of CVE-2025-5660?

CVE-2025-5660 is classified as a critical vulnerability.

What functionality is affected by CVE-2025-5660?

CVE-2025-5660 affects the file /user/register-complaint.php in the PHPGurukul Complaint Management System.

What type of vulnerability is CVE-2025-5660?

CVE-2025-5660 is an SQL injection vulnerability caused by improper handling of the noc argument.

How do I fix CVE-2025-5660?

To fix CVE-2025-5660, sanitize and validate user inputs and utilize prepared statements for SQL queries.

What impact can CVE-2025-5660 have on my system?

CVE-2025-5660 can lead to unauthorized access to your database and potential data leakage.