CVE-2025-6863: PHPGurukul Local Services Search Engine Management System edit-category-detail.php sql injection

Published Jun 29, 2025

Updated

A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. Affected by this vulnerability is an unknown functionality of the file /admin/edit-category-detail.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Local Services Search Engine Management System

Phpgurukul Local Services Search Engine Management System=2.1

Event History

Jun 29, 2025

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Jun 13, 58473

Event

via NVD·03:47 AM

Frequently Asked Questions

What is the severity of CVE-2025-6863?

CVE-2025-6863 is classified as a critical vulnerability due to its potential for SQL injection.

How do I fix CVE-2025-6863?

To fix CVE-2025-6863, it's essential to sanitize and validate user inputs for the editid parameter in the /admin/edit-category-detail.php file.

Which version of the software is affected by CVE-2025-6863?

CVE-2025-6863 affects version 2.1 of the PHPGurukul Local Services Search Engine Management System.

What type of vulnerability is CVE-2025-6863?

CVE-2025-6863 is categorized as an SQL injection vulnerability.

Where in the software can CVE-2025-6863 be found?

CVE-2025-6863 is located in the /admin/edit-category-detail.php file.