CVE-2025-4717

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in PHPGurukul Company Visitor Management System 2.0. Affected is an unknown function of the file /visitors-form.php. The manipulation of the argument fullname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74CWE-89

Affected software

No affected versions have been published.

Timeline

Published
May 15, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-471707.8Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2025-471716.7Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally.CVE-2025-471728.8Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attCVE-2025-471737.8Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-471747.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-471757.8Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.CVE-2025-471767.8'.../...//' in Microsoft Office Outlook allows an authorized attacker to execute code locally.CVE-2025-471788.0Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorizedCVE-2025-471796.7Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.CVE-2025-47189.8A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this vulnerability is an CVE-2025-471818.8Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate pCVE-2025-471825.6Improper input validation in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.
CVE-2025-4717: Critical severity, CVSS 9.8 | Vulnix