CVE-2025-7160: PHPGurukul Zoo Management System index.php sql injection
Published Jul 8, 2025
·Updated
A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. This affects an unknown part of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Phpgurukul Zoo Management System
Phpgurukul Zoo Management System=2.1
Event History
Jul 8, 2025
CVE Published
via MITRE·03:32 AM
Data Sourced
via MITRE·03:32 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Apr 29, 57559
Event
via FIRST·11:09 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-7160?
CVE-2025-7160 is classified as a critical vulnerability.
2
How does CVE-2025-7160 affect the PHPGurukul Zoo Management System?
CVE-2025-7160 allows for SQL injection through manipulation of the Username argument in the /admin/index.php file.
3
Can CVE-2025-7160 be exploited remotely?
Yes, CVE-2025-7160 can be exploited remotely.
4
What file is affected by CVE-2025-7160?
The affected file in CVE-2025-7160 is /admin/index.php.
5
How can I mitigate CVE-2025-7160?
To mitigate CVE-2025-7160, ensure to validate and sanitize user inputs to prevent SQL injection.