SQL Injection Vulnerability in PHPGurukul Emergency Ambulance Hiring Portal by PHPGurukul
CVE-2025-6310

6.9MEDIUM

Key Information:

Vendor: PHPgurukul
Status: Emergency Ambulance Hiring Portal
Vendor: CVE Published:; 20 June 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-6310?

A vulnerability has been identified in the PHPGurukul Emergency Ambulance Hiring Portal version 1.0, specifically within the index.php file. This weakness allows attackers to manipulate the 'Message' argument, potentially leading to unauthorized SQL commands being executed on the database. The vulnerability can be exploited remotely, making it a significant risk for users of the portal. It has been publicly disclosed, increasing the urgency for affected users to apply mitigations or updates. Additional parameters may also be vulnerable, raising concerns about the overall security posture of the application.

Affected Version(s)

Emergency Ambulance Hiring Portal 1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-6310 - Proof of Concept

References

https://vuldb.com/?id.313310

vdb-entrytechnical-description

https://vuldb.com/?ctiid.313310

signaturepermissions-required

https://vuldb.com/?submit.595917

third-party-advisory

CVSS V4

Score:

6.9

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction: