CVE-2025-3265 MEDIUM

CVE-2025-3265: PHPGurukul e-Diary Management System add-category.php sql injection

Vendor Phpgurukul
Product e-Diary Management System
Weakness CWE-89 · SQLi
Published April 4, 2025
Last update April 4, 2025
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-category.php. The manipulation of the argument Category leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

April 4, 2025 CVE published
April 4, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-36677 WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to SQL Injection CVE-2025-4214 PHPGuruku Online DJ Booking Management System booking-bwdates-reports-details.php sql injection CVE-2023-46084 WordPress Icons Font Loader Plugin <= 1.1.2 is vulnerable to SQL Injection CVE-2026-0568 code-projects Online Music Site ViewSongs.php sql injection CVE-2025-11409 Campcodes Advanced Online Voting Management System index.php sql injection