CVE-2025-5782: fallo de gravedad media en PHPGurukul Employee Record Management System
PHPGurukul Employee Record Management System resetpassword.php sql injection
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.3epss 0.3%
A vulnerability, which was classified as critical, has been found in PHPGurukul Employee Record Management System 1.3. Affected by this issue is some unknown functionality of the file /resetpassword.php. The manipulation of the argument newpassword leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
PHPGurukul · Employee Record Management SystemCVEs relacionadas — PHPGurukul Employee Record Management System
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-4191MEDIUMPHPGurukul Employee Record Management System editmyeducation.php sql injectionEPSS 0.6%CVE-2025-4164MEDIUMPHPGurukul Employee Record Management System changepassword.php sql injectionEPSS 0.6%CVE-2025-5212MEDIUMPHPGurukul Employee Record Management System editempexp.php sql injectionEPSS 0.5%CVE-2025-5211MEDIUMPHPGurukul Employee Record Management System myprofile.php sql injectionEPSS 0.5%CVE-2025-5210MEDIUMPHPGurukul Employee Record Management System loginerms.php sql injectionEPSS 0.5%CVE-2025-4938MEDIUMPHPGurukul Employee Record Management System registererms.php sql injectionEPSS 0.5%