CVE-2025-6332: PHPGurukul Directory Management System manage-directory.php sql injection
A vulnerability, which was classified as critical, has been found in PHPGurukul Directory Management System 2.0. Affected by this issue is some unknown functionality of the file /admin/manage-directory.php. The manipulation of the argument del leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6332?
CVE-2025-6332 has been classified as a critical vulnerability.
How does CVE-2025-6332 affect the Directory Management System?
CVE-2025-6332 allows for SQL injection through the manipulation of the 'del' argument in the /admin/manage-directory.php file.
What versions of PHPGurukul Directory Management System are affected by CVE-2025-6332?
CVE-2025-6332 affects PHPGurukul Directory Management System version 2.0.
How can I exploit CVE-2025-6332?
CVE-2025-6332 can be exploited by manipulating the 'del' parameter in an HTTP request to the /admin/manage-directory.php endpoint.
What are the recommended mitigation strategies for CVE-2025-6332?
To mitigate CVE-2025-6332, it is recommended to sanitize input and update the PHPGurukul Directory Management System to a patched version.