CVE-2025-6156: PHPGurukul Nipah Virus Testing Management System bwdates-report-ds.php sql injection
A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /bwdates-report-ds.php. The manipulation of the argument testtype leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6156?
CVE-2025-6156 is classified as a critical vulnerability.
How does CVE-2025-6156 affect the Nipah Virus Testing Management System?
CVE-2025-6156 allows for SQL injection through the manipulation of the 'testtype' argument in the /bwdates-report-ds.php file.
Who is affected by CVE-2025-6156?
CVE-2025-6156 affects users of the PHPGurukul Nipah Virus Testing Management System version 1.0.
What is the potential impact of CVE-2025-6156?
Exploitation of CVE-2025-6156 can lead to unauthorized access to the database and data leakage.
How do I fix CVE-2025-6156?
To fix CVE-2025-6156, sanitize user inputs and update the Nipah Virus Testing Management System to a patched version if available.