CVE-2025-7489 MEDIUM

CVE-2025-7489: PHPGurukul Vehicle Parking Management System search-vehicle.php sql injection

Vendor Phpgurukul

Product Vehicle Parking Management System

Weakness CWE-89 · SQLi

Published July 12, 2025

Last update July 14, 2025

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. This issue affects some unknown processing of the file /admin/search-vehicle.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

July 12, 2025 CVE published

July 14, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-7489

Related vulnerabilities

04Related CVE

CVE-2024-0857 SQLi in Universal Software's FlexWater Corporate Water Management CVE-2025-24659 WordPress Premium Packages – Sell Digital Products Securely plugin <= 5.9.6 - SQL Injection vulnerability CVE-2024-7498 itsourcecode Airline Reservation System Admin Login Page login.php login2 sql injection CVE-2026-25238 PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation CVE-2025-15436 Yonyou KSOA work_edit.jsp sql injection