CVE-2025-4071 - PHPGurukul COVID19 Testing Management System test-details.php sql injection

Back Back to CVE browser

MEDIUM

PHPGurukul COVID19 Testing Management System test-details.php sql injection

Published Apr 29, 2025

6.9

MEDIUM

CVSS 4.0

EPSS 0.64%

Description

A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /test-details.php. The manipulation of the argument Status leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products

Vendor PHP Gurukul Product COVID19 Testing Management System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

PHP Gurukul

COVID19 Testing Management System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-89

SQL Injection

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-12621
Advisory
https://github.com/2634257398/CVE-/issues/1
exploitissue-trackingThird Party Advisory
https://phpgurukul.com/
product
https://vuldb.com/?ctiid.306508
signaturepermissions-requiredPermissions Required
https://vuldb.com/?id.306508
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.559904
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-12621		Advisory
https://github.com/2634257398/CVE-/issues/1		exploitissue-trackingThird Party Advisory
https://phpgurukul.com/		product
https://vuldb.com/?ctiid.306508		signaturepermissions-requiredPermissions Required
https://vuldb.com/?id.306508		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.559904		third-party-advisoryThird Party AdvisoryVDB Entry