CVE-2025-4880

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in PHPGurukul News Portal 4.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74CWE-89

Affected software

No affected versions have been published.

Timeline

Published
May 18, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-488006.8Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.CVE-2025-488026.5Improper certificate validation in Windows SMB allows an authorized attacker to perform spoofing over a network.CVE-2025-488036.7Missing support for integrity check in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privilegCVE-2025-488046.8Acceptance of extraneous untrusted data with trusted data in Windows BitLocker allows an unauthorized attacker to bypass a security feature CVE-2025-488057.8Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally.CVE-2025-488067.8Use after free in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally.CVE-2025-488076.7Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute code locallyCVE-2025-488085.5Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.CVE-2025-488095.5Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose informaCVE-2025-48819.8A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknowCVE-2025-488105.5Processor optimization removal or modification of security-critical code in Windows Secure Kernel Mode allows an authorized attacker to discCVE-2025-488116.7Missing support for integrity check in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileg
CVE-2025-4880: Critical severity, CVSS 9.8 | Vulnix