CVE-2025-6333: PHPGurukul Directory Management System admin-profile.php sql injection
A vulnerability, which was classified as critical, was found in PHPGurukul Directory Management System 2.0. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6333?
CVE-2025-6333 is classified as a critical vulnerability.
How does CVE-2025-6333 affect the PHPGurukul Directory Management System?
CVE-2025-6333 affects the file /admin/admin-profile.php and allows for SQL injection through the manipulation of the adminname argument.
Can CVE-2025-6333 be exploited remotely?
Yes, CVE-2025-6333 can be exploited remotely due to the nature of the vulnerability.
What version of the PHPGurukul Directory Management System is affected by CVE-2025-6333?
CVE-2025-6333 affects PHPGurukul Directory Management System version 2.0.
How do I fix CVE-2025-6333?
To fix CVE-2025-6333, it is essential to sanitize and validate user input, particularly the adminname argument, to prevent SQL injection.