CVE-2025-7600: PHPGurukul Online Library Management System student-history.php sql injection
A vulnerability, which was classified as critical, was found in PHPGurukul Online Library Management System 3.0. This affects an unknown part of the file /admin/student-history.php. The manipulation of the argument stdid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7600?
CVE-2025-7600 is classified as a critical vulnerability.
How does CVE-2025-7600 affect the PHPGurukul Online Library Management System?
CVE-2025-7600 allows for SQL injection through the manipulation of the stdid argument in the /admin/student-history.php file.
What are the potential consequences of exploiting CVE-2025-7600?
Exploitation of CVE-2025-7600 can lead to unauthorized access to the database and manipulation of sensitive data.
How do I fix CVE-2025-7600?
To fix CVE-2025-7600, implement input validation and prepared statements to prevent SQL injection attacks.
Is there a known exploit for CVE-2025-7600?
Yes, there are known exploitation techniques that can manipulate the stdid parameter to execute SQL commands.