CVE-2025-2058

CWE-74CWE-89 — SQL InjectionCWE-3694 documents4 sources
Severity
6.9MEDIUM
EPSS
0.0%
top 88.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Emergency Ambulance Hiring Portal
Timeline
PublishedMar 7

Description

A vulnerability has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-xvrr-xhhf-9pj8: A vulnerability has been found in PHPGurukul Emergency Ambulance Hiring Portal 1↗2025-03-07
▶
CVEList
PHPGurukul Emergency Ambulance Hiring Portal search.php sql injection↗2025-03-07
▶

📋Vendor Advisories

1
Microsoft
Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit f3↗2022-06-14
▶
CVE-2025-2058 (MEDIUM CVSS 6.9) | A vulnerability has been found in P | cvebase.io