CVE-2025-7155: PHPGurukul Online Notes Sharing System Cookie Dashboard sql injection
A vulnerability, which was classified as critical, was found in PHPGurukul Online Notes Sharing System 1.0. This affects an unknown part of the file /Dashboard of the component Cookie Handler. The manipulation of the argument sessionid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The original researcher disclosure suspects an XPath Injection vulnerability; however, the provided attack payload appears to be characteristic of an SQL Injection attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7155?
CVE-2025-7155 is classified as a critical vulnerability.
How does CVE-2025-7155 affect the PHPGurukul Online Notes Sharing System?
CVE-2025-7155 allows for SQL injection through manipulation of the sessionid argument in the Cookie Handler component.
What versions of PHPGurukul Online Notes Sharing System are affected by CVE-2025-7155?
CVE-2025-7155 specifically affects version 1.0 of the PHPGurukul Online Notes Sharing System.
How can I mitigate the risks associated with CVE-2025-7155?
To mitigate CVE-2025-7155, it is recommended to sanitize and validate all inputs, particularly the sessionid parameter.
Is there a patch available for CVE-2025-7155?
As of now, there is no publicly available patch for CVE-2025-7155; users should update to newer versions as they are released.