CVE-2025-4242

CWE-74CWE-89 — SQL InjectionCWE-9096 documents6 sources
Severity
6.9MEDIUM
EPSS
0.2%
top 64.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Online Birth Certificate System
Timeline
PublishedMay 3
Latest updateJan 5

Description

A vulnerability classified as critical was found in PHPGurukul Online Birth Certificate System 2.0. Affected by this vulnerability is an unknown functionality of the file /admin/between-dates-report.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

3
OSV
net: netpoll: initialize work queue before error checks↗2026-01-05
▶
CVEList
PHPGurukul Online Birth Certificate System between-dates-report.php sql injection↗2025-05-03
▶
GHSA
GHSA-hgm9-29r5-x94q: A vulnerability classified as critical was found in PHPGurukul Online Birth Certificate System 2↗2025-05-03
▶

📋Vendor Advisories

1
Red Hat
kernel: net: netpoll: initialize work queue before error checks↗2026-01-05
▶
CVE-2025-4242 (MEDIUM CVSS 6.9) | A vulnerability classified as criti | cvebase.io