CVE-2025-4550

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, has been found in PHPGurukul Apartment Visitors Management System 1.0. This issue affects some unknown processing of the file /admin/pass-details.php. The manipulation of the argument pid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
PHPGurukul	Apartment Visitors Management System	1.0

References

https://github.com/y77-88/myCVE/issues/7Exploit, Issue Tracking, Third Party Advisory
https://phpgurukul.com/Product
https://vuldb.com/?ctiid.308297Permissions Required, VDB Entry
https://vuldb.com/?id.308297Third Party Advisory, VDB Entry
https://vuldb.com/?submit.567567Third Party Advisory, VDB Entry

Timeline

Published: May 11, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-45515.4A vulnerability, which was classified as problematic, was found in ContiNew Admin up to 3.6.0. Affected is an unknown function of the file /CVE-2025-455126.5A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U-Boot) v1.1.3 allows attackers to install craft CVE-2025-455139.8Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.P2pListFilter.CVE-2025-455146.5Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.frmL7ImForm.CVE-2025-45528.1A vulnerability has been found in ContiNew Admin up to 3.6.0 and classified as problematic. Affected by this vulnerability is an unknown fun CVE-2025-455252.9A NULL pointer dereference vulnerability has been identified in the JavaScript library microlight version 0.0.7, a lightweight syntax highli CVE-2025-455262.9A denial of service (DoS) vulnerability has been identified in the JavaScript library microlight version 0.0.7. This library, used for synta CVE-2025-455287.3An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF CVE-2025-455297.1An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via sendi CVE-2025-45539.8A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. Affected by this issue is some CVE-2025-45549.8A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been classified as critical. This affects an unknow CVE-2025-455427.3SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass parameter is vulnerable due to imp