CVE-2025-5230: falha de média gravidade em PHPGurukul Online Nurse Hiring System
PHPGurukul Online Nurse Hiring System bwdates-report-details.php sql injection
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.6%
A vulnerability classified as critical has been found in PHPGurukul Online Nurse Hiring System 1.0. This affects an unknown part of the file /admin/bwdates-report-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
PHPGurukul · Online Nurse Hiring SystemCVEs relacionadas — PHPGurukul Online Nurse Hiring System
No mesmo produto, das mais perigosas para as menos.
CVE-2025-1588MEDIUMPHPGurukul Online Nurse Hiring System manage-nurse.php path traversalEPSS 0.8%CVE-2025-1583MEDIUMPHPGurukul Online Nurse Hiring System search-report-details.php sql injectionEPSS 0.6%CVE-2025-1582MEDIUMPHPGurukul Online Nurse Hiring System all-request.php sql injectionEPSS 0.6%CVE-2025-4072MEDIUMPHPGurukul Online Nurse Hiring System edit-nurse.php sql injectionEPSS 0.5%CVE-2025-4080MEDIUMPHPGurukul Online Nurse Hiring System view-request.php sql injectionEPSS 0.5%CVE-2025-1581MEDIUMPHPGurukul Online Nurse Hiring System book-nurse.php sql injectionEPSS 0.5%