CVE-2025-3137: medium-severity vulnerability in PHPGurukul Online Security Guards Hiring System
PHPGurukul Online Security Guards Hiring System changeimage.php sql injection
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.6%
A vulnerability, which was classified as critical, was found in PHPGurukul Online Security Guards Hiring System 1.0. Affected is an unknown function of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
PHPGurukul · Online Security Guards Hiring SystemRelated CVEs — PHPGurukul Online Security Guards Hiring System
In the same product, most dangerous first.
CVE-2023-0527LOWPHPGurukul Online Security Guards Hiring System search-request.php cross site scriptingEPSS 6.1%CVE-2025-3138MEDIUMPHPGurukul Online Security Guards Hiring System edit-guard-detail.php sql injectionEPSS 0.7%CVE-2025-2665MEDIUMPHPGurukul Online Security Guards Hiring System bwdates-reports-details.php sql injectionEPSS 0.5%CVE-2025-2658MEDIUMPHPGurukul Online Security Guards Hiring System search-request.php sql injectionEPSS 0.5%CVE-2025-7791MEDIUMPHPGurukul Online Security Guards Hiring System search.php cross site scriptingEPSS 0.3%