CVE-2025-6330: PHPGurukul Directory Management System searchdata.php sql injection
A vulnerability classified as critical has been found in PHPGurukul Directory Management System 1.0. Affected is an unknown function of the file /searchdata.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6330?
CVE-2025-6330 is classified as a critical vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-6330?
To fix CVE-2025-6330, you should sanitize and validate input parameters in the /searchdata.php file to prevent SQL injection.
Which version of PHPGurukul Directory Management System is affected by CVE-2025-6330?
CVE-2025-6330 affects PHPGurukul Directory Management System version 1.0.
Can CVE-2025-6330 be exploited remotely?
Yes, CVE-2025-6330 can be exploited remotely, allowing attackers to manipulate the searchdata argument.
What types of attacks can be launched using CVE-2025-6330?
CVE-2025-6330 can allow attackers to perform SQL injection attacks, which can compromise the database and manipulate data.