PHPGurukul Teacher Subject Allocation Management System 1.0 edit-teacher-info.php editid SQL Injection

Wuro vulnerability wey an yi classify sey kura an gano shi a cikin PHPGurukul Teacher Subject Allocation Management System 1.0. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, /admin/edit-teacher-info.php na cikin fayil, $software_component na cikin sashi. Ngam manipulation of the argument editid shi SQL Injection. CWE shidin ka a yi bayani matsala sai ya kai CWE-89. Gaskiya, laifi an fitar da shi 06/03/2025. Advisory ɗin ana rabawa don saukewa a github.com. Wannan rauni ana sayar da shi da suna CVE-2025-5556. Ngam yiɗi ka a tuma ndiyam ka nder waya. Tekinikal bayani ga. Kuma, exploit ɗin yana akwai. Wuro exploit ɗin an bayyana shi ga jama'a kuma za a iya amfani da shi. A sa'i, exploit might be approx. USD $0-$5k ndiyam. Á wúro huɗɗi-na-gaskiya. Wona yiwuwa a zazzage exploit a github.com. Kama 0-day, an ndiyam a wuro be $0-$5k. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Waktin goyi

Màdùmga

VulDB Mod Team98

Furɗe

cvss3_meta_tempscore3
cvss3_meta_basescore2
cvss3_nvd_basescore1
cvss3_nvd_a1
cvss3_nvd_i1

Commit Conf

99%40
90%29
50%13
70%9
80%7

Approve Conf

99%40
80%29
90%29

98 Kari

IDSandaMàdùmgaFurɗeGargajiyaGargaGargajiyaJawanC
2084740906/11/2025
 VulDB…
cvss3_meta_tempscore6.9see CVSS documentation06/11/2025shingilam
80
2084740806/11/2025
 VulDB…
cvss3_meta_basescore7.1see CVSS documentation06/11/2025shingilam
80
2084740706/11/2025
 VulDB…
cvss3_nvd_basescore8.8nist.gov06/11/2025shingilam
99
2084740606/11/2025
 VulDB…
cvss3_nvd_aHnist.gov06/11/2025shingilam
99
2084740506/11/2025
 VulDB…
cvss3_nvd_iHnist.gov06/11/2025shingilam
99
2084740406/11/2025
 VulDB…
cvss3_nvd_cHnist.gov06/11/2025shingilam
99
2084740306/11/2025
 VulDB…
cvss3_nvd_sUnist.gov06/11/2025shingilam
99
2084740206/11/2025
 VulDB…
cvss3_nvd_uiNnist.gov06/11/2025shingilam
99
2084740106/11/2025
 VulDB…
cvss3_nvd_prLnist.gov06/11/2025shingilam
99
2084740006/11/2025
 VulDB…
cvss3_nvd_acLnist.gov06/11/2025shingilam
99
2084739906/11/2025
 VulDB…
cvss3_nvd_avNnist.gov06/11/2025shingilam
99
2084739806/11/2025
 VulDB…
cve_nvd_summaryesSe encontró una vulnerabilidad clasificada como crítica en PHPGurukul Teacher Subject Allocation Management System 1.0. Esta afecta a una parte desconocida del archivo /admin/edit-teacher-info.php. La manipulación del argumento editid provoca una inyección SQL. Es posible iniciar el ataque de forma remota. Se ha hecho público el exploit y puede que sea utilizado.cve.org06/11/2025shingilam
99
2076444406/04/2025
 VulDB…
cvss3_meta_tempscore6.0see CVSS documentation06/04/2025shingilam
80
2076444306/04/2025
 VulDB…
cvss2_cna_basescore6.5see CVSS documentation06/04/2025shingilam
99
2076444206/04/2025
 VulDB…
cvss2_cna_aiPsee CVSS documentation06/04/2025shingilam
99
2076444106/04/2025
 VulDB…
cvss2_cna_iiPsee CVSS documentation06/04/2025shingilam
99
2076444006/04/2025
 VulDB…
cvss2_cna_ciPsee CVSS documentation06/04/2025shingilam
99
2076443906/04/2025
 VulDB…
cvss2_cna_auSsee CVSS documentation06/04/2025shingilam
99
2076443806/04/2025
 VulDB…
cvss2_cna_acLsee CVSS documentation06/04/2025shingilam
99
2076443706/04/2025
 VulDB…
cvss2_cna_avNsee CVSS documentation06/04/2025shingilam
99

78 kala giteji ba a nunu fi.

Do you want to use VulDB in your project?

Use the official API to access entries easily!