CVE-2025-25462

CWE-89 — SQL Injection3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.7%
top 28.62%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Land Record System
Timeline
PublishedFeb 26

Description

A SQL Injection vulnerability was found in /admin/add-propertytype.php in PHPGurukul Land Record System Project in PHP v1.0 allows remote attackers to execute arbitrary code via the propertytype POST request parameter.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:LExploitability: 2.1 | Impact: 3.4

Affected Packages1 packages

🔴Vulnerability Details

2
CVEList
CVE-2025-25462: A SQL Injection vulnerability was found in /admin/add-propertytype↗2025-02-26
▶
GHSA
GHSA-pq8f-mw6x-f2j2: A SQL Injection vulnerability was found in /admin/add-propertytype↗2025-02-26
▶
CVE-2025-25462 (MEDIUM CVSS 5.5) | A SQL Injection vulnerability was f | cvebase.io