CVE-2025-5837: PHPGurukul Employee Record Management System allemployees.php sql injection
A vulnerability classified as critical has been found in PHPGurukul Employee Record Management System 1.3. Affected is an unknown function of the file /admin/allemployees.php. The manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5837?
CVE-2025-5837 is classified as a critical vulnerability.
How does CVE-2025-5837 affect the PHPGurukul Employee Record Management System?
CVE-2025-5837 affects the PHPGurukul Employee Record Management System version 1.3 by allowing SQL injection through the 'delid' parameter in the /admin/allemployees.php file.
Can CVE-2025-5837 be exploited remotely?
Yes, CVE-2025-5837 can be exploited remotely.
What types of attacks can be performed due to CVE-2025-5837?
CVE-2025-5837 can allow attackers to perform SQL injection attacks.
What should be done to mitigate CVE-2025-5837?
To mitigate CVE-2025-5837, it is advisable to validate and sanitize user input for the 'delid' parameter.