CVE-2025-5706: PHPGurukul Human Metapneumovirus Testing Management System new-user-testing.php sql injection
Published Jun 6, 2025
·Updated
A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /new-user-testing.php. The manipulation of the argument state leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
2 affected components
Phpgurukul Human Metapneumovirus Testing Management System
Anujk305 Human Metapneumovirus \(hmpv\) - Testing Management System=1.0
Event History
Jun 6, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Mar 19, 57414
Event
via FIRST·08:34 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-5706?
CVE-2025-5706 has been declared as critical.
2
What kind of vulnerability is CVE-2025-5706?
CVE-2025-5706 is an SQL injection vulnerability.
3
Which file is affected by CVE-2025-5706?
The file affected by CVE-2025-5706 is /new-user-testing.php.
4
What can the exploitation of CVE-2025-5706 lead to?
The exploitation of CVE-2025-5706 can allow attackers to manipulate SQL queries.
5
How do I fix CVE-2025-5706?
To fix CVE-2025-5706, sanitize and validate the input parameters in the affected PHP file.