CVE-2025-1588 MEDIUM

CVE-2025-1588: PHPGurukul Online Nurse Hiring System manage-nurse.php path traversal

Vendor Phpgurukul

Product Online Nurse Hiring System

Weakness CWE-24

Published February 23, 2025

Last update February 24, 2025

View on NVD All CVEs

CVSS base score

6.9/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability has been found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/manage-nurse.php. The manipulation of the argument profilepic leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions contradicting vulnerability classes.

Key dates

02Disclosure timeline

February 23, 2025 CVE published

February 24, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-1588 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/24.html