PHPGurukul Rail Pass Management System 1.0 pass-bwdates-reports-details.php fromdate/todate SQL Injection

Hakika vulnerability da aka rarraba a matsayin kura an gano a PHPGurukul Rail Pass Management System 1.0. Tabbas, aikin $software_function ne ke da matsala; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburare $software_library, a cikin fayil /admin/pass-bwdates-reports-details.php, a cikin sashi $software_component. Wuro manipulation of the argument fromdate/todate ga SQL Injection. Amfani da CWE wajen bayyana matsala yana kaiwa CWE-89. Lalle, rauni an sanar da shi 06/03/2025. Ana samun bayanin tsaro don saukewa a github.com. Ana kiran wannan rauni da CVE-2025-5554. Ngam yiɗi ka a tuma ndiyam ka nder layi. Bayani na fasaha ga. Kuma, akwai exploit. Exploit ɗin an bayyana wa jama'a, za a iya amfani da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á yí huɗɗi-na-gaskiya. Za a iya samun exploit a github.com. 0-day ga, an ndiyam a wuro be $0-$5k. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Waktin goyi

Màdùmga

VulDB Mod Team98

Furɗe

cvss3_meta_tempscore3
cvss3_meta_basescore2
cvss3_nvd_basescore1
cvss3_nvd_a1
cvss3_nvd_i1

Commit Conf

99%40
90%29
50%13
70%9
80%7

Approve Conf

99%40
80%29
90%29

98 Kari

IDSandaMàdùmgaFurɗeGargajiyaGargaGargajiyaJawanC
2084739706/11/2025
 VulDB…
cvss3_meta_tempscore6.9see CVSS documentation06/11/2025shingilam
80
2084739606/11/2025
 VulDB…
cvss3_meta_basescore7.1see CVSS documentation06/11/2025shingilam
80
2084739506/11/2025
 VulDB…
cvss3_nvd_basescore8.8nist.gov06/11/2025shingilam
99
2084739406/11/2025
 VulDB…
cvss3_nvd_aHnist.gov06/11/2025shingilam
99
2084739306/11/2025
 VulDB…
cvss3_nvd_iHnist.gov06/11/2025shingilam
99
2084739206/11/2025
 VulDB…
cvss3_nvd_cHnist.gov06/11/2025shingilam
99
2084739106/11/2025
 VulDB…
cvss3_nvd_sUnist.gov06/11/2025shingilam
99
2084739006/11/2025
 VulDB…
cvss3_nvd_uiNnist.gov06/11/2025shingilam
99
2084738906/11/2025
 VulDB…
cvss3_nvd_prLnist.gov06/11/2025shingilam
99
2084738806/11/2025
 VulDB…
cvss3_nvd_acLnist.gov06/11/2025shingilam
99
2084738706/11/2025
 VulDB…
cvss3_nvd_avNnist.gov06/11/2025shingilam
99
2076850906/04/2025
 VulDB…
cve_nvd_summaryesSe ha detectado una vulnerabilidad clasificada como crítica en PHPGurukul Rail Pass Management System 1.0. Este problema afecta a una funcionalidad desconocida del archivo /admin/pass-bwdates-reports-details.php. La manipulación del argumento fromdate/todate provoca una inyección SQL. El ataque puede ejecutarse en remoto. Se ha hecho público el exploit y puede que sea utilizado.cve.org06/04/2025shingilam
99
2076439006/04/2025
 VulDB…
cvss3_meta_tempscore6.0see CVSS documentation06/04/2025shingilam
80
2076438906/04/2025
 VulDB…
cvss2_cna_basescore6.5see CVSS documentation06/04/2025shingilam
99
2076438806/04/2025
 VulDB…
cvss2_cna_aiPsee CVSS documentation06/04/2025shingilam
99
2076438706/04/2025
 VulDB…
cvss2_cna_iiPsee CVSS documentation06/04/2025shingilam
99
2076438606/04/2025
 VulDB…
cvss2_cna_ciPsee CVSS documentation06/04/2025shingilam
99
2076438506/04/2025
 VulDB…
cvss2_cna_auSsee CVSS documentation06/04/2025shingilam
99
2076438406/04/2025
 VulDB…
cvss2_cna_acLsee CVSS documentation06/04/2025shingilam
99
2076438306/04/2025
 VulDB…
cvss2_cna_avNsee CVSS documentation06/04/2025shingilam
99

78 kala giteji ba a nunu fi.

Do you need the next level of professionalism?

Upgrade your account now!