SQL Injection Vulnerability in PHPGurukul Billing System by PHPGurukul
CVE-2025-65380
6.5MEDIUM
What is CVE-2025-65380?
The PHPGurukul Billing System 1.0 is susceptible to an SQL Injection vulnerability at the admin/index.php endpoint. This occurs because the username parameter does not properly validate input, allowing attackers to inject malicious SQL code into the database queries. As a result, unauthorized access to sensitive data may be possible, leading to potential data breaches and exploitation of system integrity.
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved