SQL Injection Vulnerability in PHPGURUKUL Vehicle Parking Management System
CVE-2025-45885
9.8CRITICAL
What is CVE-2025-45885?
The PHPGURUKUL Vehicle Parking Management System version 1.13 contains a vulnerability that allows for SQL injection through the '/vpms/users/login.php' endpoint. This weakness permits attackers to manipulate SQL queries by injecting malicious payloads via the 'emailcont' parameter, potentially leading to unauthorized access to sensitive data. It is essential for users of this system to implement security measures and apply appropriate patches to safeguard against such attacks.