CVE Details
Basic Information
| Title | CVE-2025-4907 PHPGurukul Daily Expense Tracker System forgot-password.php sql injection |
|---|---|
| Type | cve |
| Published | 2025-05-19T02:31:05 |
| Last Seen | 2025-05-19T03:27:09 |
CVSS Information
| Base Score | 0.0 () |
|---|---|
| Attack Vector | |
| Attack Complexity | |
| Privileges Required | |
| User Interaction | |
| Scope | |
| Confidentiality Impact | |
| Integrity Impact | |
| Availability Impact |
AI Analysis
| AI Description | A critical SQL injection vulnerability was discovered in the forgot-password.php script of PHPGurukul’s Daily Expense Tracker System version 1.1. This flaw allows remote attackers to execute arbitrary SQL commands via crafted input, potentially leading to unauthorized access or data manipulation. |
|---|---|
| AI Severity | Critical |
| Vendor | PHPGurukul |
| Product | Daily Expense Tracker System |
| Affected Version | 1.1 |
Additional Information
| CVE List | CVE-2025-4907 |
|---|---|
| CWE List | CWE-74, CWE-89 |
| Bulletin Family | cve |
Description
A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the…
CVSS Score Summary
Base Score: %!f(string=#) ()