CVE-2025-1582 MEDIUM

CVE-2025-1582: PHPGurukul Online Nurse Hiring System all-request.php sql injection

Vendor Phpgurukul

Product Online Nurse Hiring System

Weakness CWE-89 · SQLi

Published February 23, 2025

Last update February 24, 2025

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability was found in PHPGurukul Online Nurse Hiring System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/all-request.php. The manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

February 23, 2025 CVE published

February 24, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-1582 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2026-45722 Nextcloud: Tables app allows limited SQLi in ORDER BY with malicious sort order argument for Table Views CVE-2025-55167 WeGIA SQL Injection via id_fichamedica at endpoint `GET/html/funcionario/dependente_remover.php` CVE-2025-5375 PHPGurukul HPGurukul Online Birth Certificate System registered-users.php sql injection CVE-2025-2052 PHPGurukul Apartment Visitors Management System forgot-password.php sql injection CVE-2025-4934 PHPGurukul User Registration & Login and User Management System edit-profile.php sql injection