CVE Details
Basic Information
| Title | PHPGurukul Complaint Management System profile.php sql injection |
|---|---|
| Type | cve |
| Published | 2025-06-05T13:00:18.761Z |
| Last Seen |
Product Information
| Vendor | PHPGurukul |
|---|---|
| Product | Complaint Management System |
| Version | 2.0 |
CVSS Information
| Base Score | 5.3 (MEDIUM) |
|---|---|
| Attack Vector | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N |
| Confidentiality Impact | |
| Integrity Impact | |
| Availability Impact |
AI Analysis
| AI Description | A SQL injection vulnerability in PHPGurukul Complaint Management System 2.0 allows remote attackers to inject malicious SQL code via the pincode argument in profile.php, potentially leading to data tampering and unauthorized access. |
|---|---|
| AI Severity | Medium |
| Vendor | PHPGurukul |
| Product | Complaint Management System |
| Affected Version | 2.0 |
Affected Products
- PHPGurukul Complaint Management System 2.0
Additional Information
| CVE List | |
|---|---|
| CWE List | CWE-89, CWE-74 |
| Bulletin Family |
References
Description
A vulnerability classified as critical was found in PHPGurukul Complaint Management System 2.0. Affected by this vulnerability is an unknown functionality of the file /user/profile.php. The manipulation of the argument pincode leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.