CVE-2025-6125: medium-severity vulnerability in PHPGurukul Rail Pass Management System
PHPGurukul Rail Pass Management System aboutus.php cross site scripting
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.8epss 0.3%
A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/aboutus.php. The manipulation of the argument pagedes leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Affected products
PHPGurukul · Rail Pass Management SystemRelated CVEs — PHPGurukul Rail Pass Management System
In the same product, most dangerous first.
CVE-2025-4070MEDIUMPHPGurukul Rail Pass Management System changeimage.php sql injectionEPSS 0.6%CVE-2025-4039MEDIUMPHPGurukul Rail Pass Management System search-pass.php sql injectionEPSS 0.6%CVE-2023-3275MEDIUMPHPGurukul Rail Pass Management System POST Request view-pass-detail.php sql injectionEPSS 0.5%CVE-2025-5553MEDIUMPHPGurukul Rail Pass Management System download-pass.php sql injectionEPSS 0.5%CVE-2025-5975MEDIUMPHPGurukul Rail Pass Management System download-pass.php cross site scriptingEPSS 0.5%CVE-2025-5554MEDIUMPHPGurukul Rail Pass Management System pass-bwdates-reports-details.php sql injectionEPSS 0.4%