CVE-2025-5860: medium-severity vulnerability in PHPGurukul Maid Hiring Management System
PHPGurukul Maid Hiring Management System search-booking-request.php sql injection
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.5%
A vulnerability, which was classified as critical, was found in PHPGurukul Maid Hiring Management System 1.0. This affects an unknown part of the file /admin/search-booking-request.php. The manipulation of the argument searchdata leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
PHPGurukul · Maid Hiring Management SystemRelated CVEs — PHPGurukul Maid Hiring Management System
In the same product, most dangerous first.
CVE-2024-13014MEDIUMPHPGurukul Maid Hiring Management System search-maid.php sql injectionEPSS 0.6%CVE-2024-13016MEDIUMPHPGurukul Maid Hiring Management System edit-category.php sql injectionEPSS 0.4%CVE-2024-13017MEDIUMPHPGurukul Maid Hiring Management System About Us Page aboutus.php cross site scriptingEPSS 0.4%CVE-2024-13023MEDIUMPHPGurukul Maid Hiring Management System Search Maid Page search-maid.php cross site scriptingEPSS 0.4%CVE-2024-13013MEDIUMPHPGurukul Maid Hiring Management System Contact Us Page contactus.php cross site scriptingEPSS 0.4%CVE-2024-13018MEDIUMPHPGurukul Maid Hiring Management System profile.php cross site scriptingEPSS 0.3%