CVE-2025-5694 — Injection in Human Metapneumovirus Testing Management System

CWE-74 — Injection CWE-89 — SQL Injection CWE-416 — Use After Free4 documents4 sources

Severity

5.3MEDIUMNVD

EPSS

0.2%

top 58.18%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Phpgurukul Human Metapneumovirus Testing Management System Anujk305 Human Metapneumovirus Testing Management System

Timeline

PublishedJun 5

Description

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5phpgurukul/human_metapneumovirus_testing_management_system1.0

▶NVDanujk305/human_metapneumovirus_testing_management_system1.0

🔴Vulnerability Details

CVEList

PHPGurukul Human Metapneumovirus Testing Management System search-report-result.php sql injection↗2025-06-05

▶

GHSA

GHSA-v53f-hxpp-whfr: A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1↗2025-06-05

▶

📋Vendor Advisories

Microsoft

An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap. This vulnerability affects Firefox < 127.↗2024-06-11

▶