CVE-2025-4508: medium-severity vulnerability in PHPGurukul e-Diary Management System
PHPGurukul e-Diary Management System my-profile.php sql injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.6%
A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. This vulnerability affects unknown code of the file /my-profile.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
PHPGurukul · e-Diary Management SystemRelated CVEs — PHPGurukul e-Diary Management System
In the same product, most dangerous first.
CVE-2025-3265MEDIUMPHPGurukul e-Diary Management System add-category.php sql injectionEPSS 0.6%CVE-2025-3216MEDIUMPHPGurukul e-Diary Management System password-recovery.php sql injectionEPSS 0.6%CVE-2025-3220MEDIUMPHPGurukul e-Diary Management System dashboard.php sql injectionEPSS 0.6%CVE-2025-3217MEDIUMPHPGurukul e-Diary Management System registration.php sql injectionEPSS 0.6%CVE-2025-3213MEDIUMPHPGurukul e-Diary Management System view-note.php sql injectionEPSS 0.6%CVE-2025-3188MEDIUMPHPGurukul e-Diary Management System add-notes.php sql injectionEPSS 0.6%