EUVD-2025-17425Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Low-privileged authenticated SQL injection with no scope change and limited impact on data confidentiality, integrity, and availability.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
7DescriptionCVE.org
A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /test-details.php. The manipulation of the argument assignto leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
AnalysisAI
SQL injection in PHPGurukul Nipah Virus Testing Management System 1.0 allows a remote, low-privileged attacker to inject SQL commands via the 'assignto' parameter of /test-details.php, potentially reading or modifying database contents. Public exploit code is available, but the EPSS score of 0.09% (25th percentile) suggests very low probability of widespread exploitation. The vulnerability has not been added to CISA's KEV catalog, indicating no known active exploitation.
Technical ContextAI
The vulnerability is located in the file /test-details.php of the PHP-based application (CPE: cpe:2.3:a:phpgurukul:nipah_virus_testing_management_system:1.0). The root cause is improper neutralization of user input in the 'assignto' parameter, classified as CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'). This allows an attacker to break out of the intended SQL query context and execute arbitrary SQL statements against the backend database.
RemediationAI
No official patch has been released by PHPGurukul as of this analysis. As an immediate mitigation, enforce strict input validation and use parameterized queries or prepared statements for the 'assignto' parameter in /test-details.php. Restrict access to the file to trusted users only. Deploying a web application firewall (WAF) with SQL injection detection rules can provide additional protection. Disabling the affected endpoint if not strictly required eliminates the attack surface, though this may disrupt business functions.
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear
The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by
ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Rated critical severity (C
Roundcube Webmail contains a critical PHP object deserialization vulnerability (CVE-2025-49113, CVSS 9.9) that allows au
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
Palo Alto Networks PAN-OS management web interface contains an authentication bypass allowing unauthenticated attackers
Nagios XI version xi-5.7.5 is affected by OS command injection. Rated high severity (CVSS 8.8), this vulnerability is re
Nagios XI version xi-5.7.5 is affected by OS command injection. Rated high severity (CVSS 8.8), this vulnerability is re
The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows
The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1
Share
External POC / Exploit Code
Leaving vuln.today