CVE-2025-2090: fallo de gravedad media en PHPGurukul Pre-School Enrollment System
PHPGurukul Pre-School Enrollment System Sub Admin add-subadmin.php access control
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.1epss 0.4%
A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php of the component Sub Admin Handler. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Productos afectados
PHPGurukul · Pre-School Enrollment SystemCVEs relacionadas — PHPGurukul Pre-School Enrollment System
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-1966MEDIUMPHPGurukul Pre-School Enrollment System index.php sql injectionEPSS 0.6%CVE-2025-2362MEDIUMPHPGurukul Pre-School Enrollment System contact-us.php sql injectionEPSS 0.5%CVE-2025-2034MEDIUMPHPGurukul Pre-School Enrollment System edit-class.php sql injectionEPSS 0.5%CVE-2025-2088MEDIUMPHPGurukul Pre-School Enrollment System profile.php sql injectionEPSS 0.5%CVE-2025-4031MEDIUMPHPGurukul Pre-School Enrollment System aboutus.php sql injectionEPSS 0.5%CVE-2025-6323MEDIUMPHPGurukul Pre-School Enrollment System enrollment.php sql injectionEPSS 0.5%