Description
A vulnerability was found in PHPGurukul Local Services Search Engine Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /serviceman-search.php. The manipulation of the argument location leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| PHPGurukul | Local Services Search Engine Management System | 1.0 |
References
- https://github.com/aionman/cve/issues/7Exploit, Issue Tracking, Third Party Advisory
- https://phpgurukul.com/Product
- https://vuldb.com/?ctiid.299885Permissions Required, VDB Entry
- https://vuldb.com/?id.299885Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.516546Third Party Advisory, VDB Entry
- https://github.com/aionman/cve/issues/7Exploit, Issue Tracking, Third Party Advisory
Timeline
- Published
- Mar 17, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed