SQL Injection Vulnerability in PHPGurukul Human Metapneumovirus Testing Management System
CVE-2025-2374
8.8HIGH
Key Information:
- Vendor
PHPGurukul
- Vendor
- CVE Published:
- 17 March 2025
What is CVE-2025-2374?
A SQL Injection vulnerability has been discovered in the PHPGurukul Human Metapneumovirus Testing Management System version 1.0. This flaw resides in the processing of the /profile.php file, where improper handling of certain input parameters (aid, adminname, mobilenumber, email) allows an attacker to execute unauthorized SQL commands. The exploit can be initiated remotely, potentially exposing sensitive information and compromising the integrity of the database. The details of this vulnerability have been publicly disclosed, making it essential for users to take immediate action to rectify the issue.