A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /search-report-result.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions contradicting parameter names to be affected.
References
| Link | Resource |
|---|---|
| https://github.com/wqywfvc/CVE/issues/5 | Broken Link |
| https://phpgurukul.com/ | Product |
| https://vuldb.com/?ctiid.296556 | Permissions Required VDB Entry |
| https://vuldb.com/?id.296556 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.504234 | Third Party Advisory VDB Entry |
Configurations
History
07 May 2025, 17:36
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Phpgurukul
Phpgurukul nipah Virus Testing Management System |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| References | () https://phpgurukul.com/ - Product | |
| References | () https://github.com/wqywfvc/CVE/issues/5 - Broken Link | |
| References | () https://vuldb.com/?ctiid.296556 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?submit.504234 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?id.296556 - Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:phpgurukul:nipah_virus_testing_management_system:1.0:*:*:*:*:*:*:* |
23 Feb 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-23 10:15
Updated : 2025-05-07 17:36
NVD link : CVE-2025-1580
Mitre link : CVE-2025-1580
JSON object : View
Products Affected
phpgurukul
- nipah_virus_testing_management_system