CVE-2025-8179: PHPGurukul Local Services Search Engine Management System changeimage.php sql injection

Published Jul 26, 2025

Updated

A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. Affected by this vulnerability is an unknown functionality of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Local Services Search Engine Management System

Phpgurukul Local Services Search Engine Management System=2.1

Event History

Jul 26, 2025

CVE Published

via MITRE·05:02 AM

Data Sourced

via MITRE·05:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeaknessAffected Software

Jun 24, 58473

Event

via NVD·09:38 AM

Frequently Asked Questions

What is the severity of CVE-2025-8179?

CVE-2025-8179 has been classified as a critical vulnerability.

How does CVE-2025-8179 affect the PHPGurukul Local Services Search Engine Management System?

CVE-2025-8179 allows for SQL injection through the manipulation of the editid argument in the /admin/changeimage.php file.

What are the potential impacts of exploiting CVE-2025-8179?

Exploiting CVE-2025-8179 can lead to unauthorized access to database information and potential data compromise.

How can I mitigate the risks associated with CVE-2025-8179?

To mitigate CVE-2025-8179, ensure to validate and sanitize inputs for the editid parameter and update to the latest version of the software.

Is there a patch available for CVE-2025-8179?

As of now, check with PHPGurukul for an official patch or workaround for CVE-2025-8179.