CVE-2025-5659 MEDIUM

CVE-2025-5659: PHPGurukul Complaint Management System profile.php sql injection

Vendor Phpgurukul

Product Complaint Management System

Weakness CWE-89 · SQLi

Published June 5, 2025

Last update June 5, 2025

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability classified as critical was found in PHPGurukul Complaint Management System 2.0. Affected by this vulnerability is an unknown functionality of the file /user/profile.php. The manipulation of the argument pincode leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

June 5, 2025 CVE published

June 5, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-5659 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2024-39887 Apache Superset: Improper SQL authorisation, parse not checking for specific engine functions CVE-2026-5196 code-projects Student Membership System delete_member.php sql injection CVE-2023-4712 Xintian Smart Table Integrated Management System AddUpdateRole.aspx sql injection CVE-2025-2641 PHPGurukul Art Gallery Management System edit-artist-detail.php sql injection CVE-2026-4569 SourceCodester Sales and Inventory System HTTP POST Request view_category.php sql injection