CVE-2025-6153: PHPGurukul Hostel Management System students.php sql injection
A vulnerability has been found in PHPGurukul Hostel Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/students.php. The manipulation of the argument searchbox leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6153?
CVE-2025-6153 is classified as a critical vulnerability.
How does CVE-2025-6153 affect the PHPGurukul Hostel Management System?
CVE-2025-6153 affects the /admin/students.php file through SQL injection due to improper handling of the search_box argument.
Can CVE-2025-6153 be exploited remotely?
Yes, CVE-2025-6153 can be exploited remotely.
What are the potential impacts of exploiting CVE-2025-6153?
Exploitation of CVE-2025-6153 could allow an attacker to execute arbitrary SQL queries on the database.
How do I fix CVE-2025-6153?
To fix CVE-2025-6153, input validation and sanitization of the search_box parameter should be implemented to prevent SQL injection.