CVE-2025-4265 MEDIUM

CVE-2025-4265: PHPGurukul Emergency Ambulance Hiring Portal contact-us.php sql injection

Vendor Phpgurukul

Product Emergency Ambulance Hiring Portal

Weakness CWE-89 · SQLi

Published May 5, 2025

Last update May 5, 2025

View on NVD All CVEs

CVSS base score

6.9/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability classified as critical was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/contact-us.php. The manipulation of the argument mobnum leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

Key dates

02Disclosure timeline

May 5, 2025 CVE published

May 5, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-4265

Related vulnerabilities

04Related CVE

CVE-2024-0307 Kashipara Dynamic Lab Management System login_process.php sql injection CVE-2021-24348 Side Menu < 3.1.5 - Authenticated (admin+) SQL Injection CVE-2024-12032 Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking <= 2.15.3 - Authenticated (Subscriber+) SQL Injection CVE-2024-6276 lahirudanushka School Management System Teacher Page teacher.php sql injection CVE-2023-44267 Online Art Gallery v1.0 - Multiple Unauthenticated SQL Injections (SQLi)