CVE-2025-65380: SQL Injection

Published Dec 2, 2025

Updated

PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username parameter accepts unvalidated user input, which is then concatenated directly into a backend SQL query.

Affected Software

2 affected components

Phpgurukul Billing System

Phpgurukul Billing System=1.0

Event History

Dec 2, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-65380?

CVE-2025-65380 has been classified as a high severity vulnerability due to the potential for SQL Injection attacks.

How do I fix CVE-2025-65380?

To fix CVE-2025-65380, validate and sanitize user input for the username parameter before it is used in SQL queries.

What systems are affected by CVE-2025-65380?

CVE-2025-65380 affects PHPGurukul Billing System version 1.0 specifically in the admin/index.php endpoint.

How can CVE-2025-65380 be exploited?

CVE-2025-65380 can be exploited by attackers who manipulate the username parameter in the SQL query to execute unauthorized commands.

Is there a patch available for CVE-2025-65380?

As of now, there are no official patches available for CVE-2025-65380, and manual mitigation is recommended.