CVE-2025-5553 — Injection in Rail Pass Management System

CWE-74 — InjectionCWE-89 — SQL InjectionCWE-833 — Deadlock7 documents6 sources
Severity
6.9MEDIUMNVD
EPSS
0.3%
top 47.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Rail Pass Management System
Timeline
PublishedJun 4
Latest updateDec 16

Description

A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /download-pass.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

3
OSV
s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump↗2025-12-16
▶
CVEList
PHPGurukul Rail Pass Management System download-pass.php sql injection↗2025-06-04
▶
GHSA
GHSA-wgp9-c2jp-6pqr: A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1↗2025-06-04
▶

📋Vendor Advisories

1
Red Hat
kernel: Linux kernel: Denial of Service due to deadlock in PCI error recovery↗2025-12-16
▶

🕵️Threat Intelligence

1
Wiz
CVE-2025-68310 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
CVE-2025-5553 — Injection | cvebase