Is there a public PoC exploit available for EUVD-2025-21227?

Yes, a public proof-of-concept exploit is available for EUVD-2025-21227. Prioritise patching immediately. EPSS: 0.1%.

Vehicle Parking Management System EUVD-2025-21227

Q: What is the CVSS score of EUVD-2025-21227?

EUVD-2025-21227 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

| CVE-2025-7481 LOW

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CWE-74)

2025-07-12 cna@vuldb.com

PHP SQLi Vehicle Parking Management System

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.3 MEDIUM

Requires authenticated session (PR:L); SQL injection on profile page yields limited read/write with no scope change.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

6.3 (MEDIUM) 2.1 (LOW)

EUVD ID Assigned

Mar 16, 2026 - 08:56 euvd

EUVD-2025-21227

Analysis Generated

Mar 16, 2026 - 08:56 vuln.today

PoC Detected

Jul 15, 2025 - 18:07 vuln.today

Public exploit code

CVE Published

Jul 12, 2025 - 17:15 cve.org

LOW 2.1

CVE Published

Jul 12, 2025 - 17:15 nvd

MEDIUM 6.3

DescriptionCVE.org

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been classified as critical. This affects an unknown part of the file /users/profile.php. The manipulation of the argument firstname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

AnalysisAI

SQL injection in PHPGurukul Vehicle Parking Management System 1.13 allows authenticated remote users to manipulate database queries by injecting malicious SQL syntax into the firstname parameter at /users/profile.php. The advisory notes additional parameters in the same file may be vulnerable, broadening the attack surface. A proof-of-concept is publicly available on GitHub, though no active exploitation is confirmed and EPSS sits at a very low 0.06%, reflecting limited real-world uptake.

Technical ContextAI

The affected product is a PHP-based web application for managing vehicle parking operations, identified by CPE cpe:2.3:a:phpgurukul:vehicle_parking_management_system:1.13. The root cause is classified as CWE-74 (Injection), though the specific mechanism is SQL injection (CWE-89 would be more precise), arising from unsanitized user-controlled input in the firstname form field being interpolated directly into backend database queries without parameterization. The CVSS 4.0 supplemental metric E:P confirms a publicly available exploit exists, sourced from a GitHub issue report by the discoverer.

RemediationAI

No vendor-released patch has been identified at time of analysis. The primary mitigation is to refactor /users/profile.php to use parameterized queries or prepared statements for all user-supplied inputs including firstname and any other unvalidated fields in the same file. As a compensating control, deploying a web application firewall with SQL injection detection rules (e.g., ModSecurity with the OWASP Core Rule Set) can block common payload patterns with minimal operational disruption. Restricting access to the application to trusted internal networks or VPN-only access eliminates the network attack vector entirely. The PoC and affected parameter details are documented at https://github.com/f1rstb100d/myCVE/issues/111 and https://vuldb.com/?id.316131.