SQL Injection Vulnerability in Complaint Management System by phpgurukul
CVE-2025-57149

6.5MEDIUM

Key Information:

Vendor

phpgurukul
Status
Complaint Management System
Vendor
CVE Published:
3 September 2025

What is CVE-2025-57149?

The Complaint Management System 2.0 developed by phpgurukul is susceptible to SQL Injection attacks through the cid parameter in the complaint-details.php file. This vulnerability allows attackers to manipulate SQL queries, which may lead to unauthorized access to sensitive data or disrupt system operations. It is crucial for users of this software to apply necessary patches and implement security measures to safeguard against potential exploitation.

References

https://doc.clickup.com/3897127/p/h/3pxt7-12476/312c6ba68...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.