How to fix CVE-2025-6310?

Within 24 hours: Assess which production and non-production instances are running PHPGurukul 1.0 and isolate affected systems from internet access or restrict access via WAF rules. Within 7 days: Implement input validation and parameterized query WAF rules to block SQL injection payloads targeting /index.php Message parameter; enable database activity monitoring. Within 30 days: Evaluate migration to a patched version or alternative solution; conduct database audit for unauthorized access or data exfiltration during the vulnerability exposure period.

Is PHP affected by CVE-2025-6310?

A publicly disclosed SQL injection vulnerability in PHPGurukul Emergency Ambulance Hiring Portal 1.0 could allow attackers to extract or manipulate sensitive data from the application database, potentially affecting patient records and operational data.

CVE-2025-6310

EUVD-2025-18719 HIGH

2025-06-20 [email protected]

PHP SQLi Emergency Ambulance Hiring Portal

7.3

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 15, 2026 - 00:19 vuln.today

EUVD ID Assigned

Mar 15, 2026 - 00:19 euvd

EUVD-2025-18719

PoC Detected

Jun 26, 2025 - 21:18 vuln.today

Public exploit code

CVE Published

Jun 20, 2025 - 05:15 nvd

HIGH 7.3

DescriptionNVD

A vulnerability, which was classified as critical, has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument Message leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

AnalysisAI

A SQL injection vulnerability (CVSS 7.3). Risk factors: public PoC available.

Technical ContextAI

CWE-74 (Injection). CVSS 7.3 indicates high severity.

RemediationAI

Monitor vendor channels for patch availability. Implement input validation and WAF rules as interim mitigation.

CVE-2025-6310 vulnerability details – vuln.today

Back