SQL Injection Vulnerability in PHPGurukul Curfew e-Pass Management System
CVE-2025-5562

6.9MEDIUM

Key Information:

Vendor: PHPgurukul
Status: Curfew E-pass Management System
Vendor: CVE Published:; 4 June 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-5562?

A SQL injection vulnerability has been identified in the Curfew e-Pass Management System 1.0, where improper validation in the /admin/edit-category-detail.php file allows an attacker to manipulate the editid parameter. This could be exploited remotely, potentially compromising the integrity of the database. The exploit has been made public, indicating a necessity for immediate remediation to protect against possible attacks.

Affected Version(s)

Curfew e-Pass Management System 1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-5562 - Proof of Concept

References

https://vuldb.com/?id.311012

vdb-entrytechnical-description

https://vuldb.com/?ctiid.311012

signaturepermissions-required

https://vuldb.com/?submit.587544

third-party-advisory

CVSS V4

Score:

6.9

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction: