CVE-2025-2663

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /search-locker-details.php. The manipulation of the argument searchinput leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74CWE-89

Affected software

VendorProductVersions
PHPGurukulBank Locker Management System1.0

References

Timeline

Published
Mar 23, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-266307.8Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally.CVE-2025-266317.3Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally.CVE-2025-266337.0Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.CVE-2025-266347.5Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network.CVE-2025-266356.5Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network.CVE-2025-266365.5Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose informaCVE-2025-266376.8Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.CVE-2025-266397.8Integer overflow or wraparound in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.CVE-2025-26647.2A vulnerability was found in CodeZips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown funcCVE-2025-266407.0Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.CVE-2025-266417.5Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.CVE-2025-266427.8Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-2663: Critical severity, CVSS 9.8 | Vulnix