A vulnerability classified as critical has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file /edit-subadmin.php?said=3. The manipulation of the argument mobilenumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/ARPANET-cyber/CVE/issues/11 | Exploit Third Party Advisory Issue Tracking |
| https://phpgurukul.com/ | Product |
| https://vuldb.com/?ctiid.300699 | Permissions Required VDB Entry |
| https://vuldb.com/?id.300699 | Permissions Required VDB Entry |
| https://vuldb.com/?submit.521451 | VDB Entry |
Configurations
History
27 Mar 2025, 18:14
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Phpgurukul bank Locker Management System
Phpgurukul |
|
| CPE | cpe:2.3:a:phpgurukul:bank_locker_management_system:1.0:*:*:*:*:*:*:* | |
| References | () https://github.com/ARPANET-cyber/CVE/issues/11 - Exploit, Third Party Advisory, Issue Tracking |
25 Mar 2025, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Anujkumar bank Locker Management System
Anujkumar |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:a:anujkumar:bank_locker_management_system:1.0:*:*:*:*:*:*:* | |
| References | () https://github.com/ARPANET-cyber/CVE/issues/11 - Exploit, Third Party Advisory | |
| References | () https://phpgurukul.com/ - Product | |
| References | () https://vuldb.com/?ctiid.300699 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?submit.521451 - VDB Entry | |
| References | () https://vuldb.com/?id.300699 - Permissions Required, VDB Entry |
24 Mar 2025, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-24 04:15
Updated : 2025-03-27 18:14
NVD link : CVE-2025-2682
Mitre link : CVE-2025-2682
JSON object : View
Products Affected
phpgurukul
- bank_locker_management_system