CVE-2025-6908: PHPGurukul Old Age Home Management System edit-services.php sql injection
Published Jun 30, 2025
·Updated
A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/edit-services.php. The manipulation of the argument sertitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Phpgurukul Old Age Home Management System
Phpgurukul Old Age Home Management System=1.0
Event History
Jun 30, 2025
CVE Published
via MITRE·01:02 PM
Data Sourced
via MITRE·01:02 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Nov 15, 57490
Event
via FIRST·11:49 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-6908?
CVE-2025-6908 is classified as a critical vulnerability.
2
What type of vulnerability is CVE-2025-6908?
CVE-2025-6908 is a SQL injection vulnerability.
3
Which file is affected by CVE-2025-6908?
CVE-2025-6908 affects the file /admin/edit-services.php.
4
How does CVE-2025-6908 impact the system?
CVE-2025-6908 allows an attacker to manipulate the sertitle argument to execute SQL injection attacks.
5
How can I mitigate CVE-2025-6908?
To mitigate CVE-2025-6908, validate and sanitize user inputs, and implement prepared statements for database queries.