CVE-2025-2034

A vulnerability has been found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit-class.php?cid=1. The manipulation of the argument classname/capacity/classtiming leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cna@vuldb.com

Published

2025-03-06

Last modified

2025-03-22

Weaknesses

CWE-74, CWE-89

Affected products

• Pre-school Enrollment System (Phpgurukul)

References

• https://github.com/wangCCTV/cve/issues/2
• https://phpgurukul.com/
• https://vuldb.com/?ctiid.298777
• https://vuldb.com/?id.298777
• https://vuldb.com/?submit.512292