CVE Details
Basic Information
| Title | PHPGurukul Vehicle Parking Management System signup.php sql injection |
|---|---|
| Type | cve |
| Published | 2025-07-12T16:02:06.782Z |
| Modified | 2025-07-12T16:02:06.782Z |
Product Information
| Vendor | PHPGurukul |
|---|---|
| Product | Vehicle Parking Management System |
| Version | 1.13 |
CVSS Information
| Base Score | 6.9 (MEDIUM) |
|---|---|
| Attack Vector | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P |
AI Analysis
| AI Description | A SQL injection vulnerability in the signup.php file of PHPGurukul’s Vehicle Parking Management System version 1.13 allows remote attackers to inject malicious SQL code, potentially leading to unauthorized data access and manipulation. |
|---|---|
| AI Severity | High |
| AI Vendor | PHPGurukul |
| AI Product | Vehicle Parking Management System |
| AI Version | 1.13 |
Affected Products
- PHPGurukul Vehicle Parking Management System 1.13
Additional Information
| CWE List | CWE-89, CWE-74 |
|---|---|
| Source | VulDB |
Description
A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this issue is some unknown functionality of the file /users/signup.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.