CVE-2025-10025 — Injection in Online Course Registration

CWE-74 — InjectionCWE-89 — SQL InjectionCWE-416 — Use After Free4 documents4 sources
Severity
6.9MEDIUMNVD
EPSS
0.0%
top 91.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Online Course Registration
Timeline
PublishedSep 5

Description

A vulnerability has been found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/semester.php. The manipulation of the argument semester leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-gpf4-f5q9-wgmf: A vulnerability has been found in PHPGurukul Online Course Registration 3↗2025-09-05
▶
CVEList
PHPGurukul Online Course Registration semester.php sql injection↗2025-09-05
▶
CVE-2025-10025 — Injection | cvebase