CVE-2025-2057 — Injection in Emergency Ambulance Hiring Portal

CWE-74 — InjectionCWE-89 — SQL InjectionCWE-369 — Divide By Zero4 documents4 sources
Severity
6.9MEDIUMNVD
EPSS
0.0%
top 88.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Emergency Ambulance Hiring Portal
Timeline
PublishedMar 7

Description

A vulnerability, which was classified as critical, was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/about-us.php. The manipulation of the argument pagedes leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
PHPGurukul Emergency Ambulance Hiring Portal about-us.php sql injection↗2025-03-07
▶
GHSA
GHSA-9x7f-6h8g-ffm8: A vulnerability, which was classified as critical, was found in PHPGurukul Emergency Ambulance Hiring Portal 1↗2025-03-07
▶

📋Vendor Advisories

1
Microsoft
Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit f3↗2022-06-14
▶
CVE-2025-2057 — Injection | cvebase