CVE-2025-45021

CWE-89 — SQL InjectionCWE-476 — NULL Pointer Dereference4 documents4 sources
Severity
5.3MEDIUM
EPSS
0.1%
top 75.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Directory Management System
Timeline
PublishedApr 30

Description

A SQL Injection vulnerability was identified in the admin/edit-directory.php file of the PHPGurukul Directory Management System v2.0. Attackers can exploit this vulnerability via the email parameter in a POST request to execute arbitrary SQL commands.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 1.8 | Impact: 3.4

Affected Packages1 packages

🔴Vulnerability Details

2
CVEList
CVE-2025-45021: A SQL Injection vulnerability was identified in the admin/edit-directory↗2025-04-30
▶
GHSA
GHSA-qh62-99w2-xfq5: A SQL Injection vulnerability was identified in the admin/edit-directory↗2025-04-30
▶

📋Vendor Advisories

1
Microsoft
memcg_write_event_control(): fix a user-triggerable oops↗2024-09-10
▶
CVE-2025-45021 (MEDIUM CVSS 5.3) | A SQL Injection vulnerability was i | cvebase.io