CVE-2025-3188: medium-severity vulnerability in PHPGurukul e-Diary Management System
PHPGurukul e-Diary Management System add-notes.php sql injection
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.6%
A vulnerability classified as critical has been found in PHPGurukul e-Diary Management System 1.0. This affects an unknown part of the file /add-notes.php. The manipulation of the argument Category leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
PHPGurukul · e-Diary Management SystemRelated CVEs — PHPGurukul e-Diary Management System
In the same product, most dangerous first.
CVE-2025-3265MEDIUMPHPGurukul e-Diary Management System add-category.php sql injectionEPSS 0.6%CVE-2025-3216MEDIUMPHPGurukul e-Diary Management System password-recovery.php sql injectionEPSS 0.6%CVE-2025-3220MEDIUMPHPGurukul e-Diary Management System dashboard.php sql injectionEPSS 0.6%CVE-2025-3217MEDIUMPHPGurukul e-Diary Management System registration.php sql injectionEPSS 0.6%CVE-2025-3213MEDIUMPHPGurukul e-Diary Management System view-note.php sql injectionEPSS 0.6%CVE-2025-3187MEDIUMPHPGurukul e-Diary Management System login.php sql injectionEPSS 0.6%