CVE-2025-5252

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in PHPGurukul News Portal Project 4.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-subadmin.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74CWE-89

Affected software

No affected versions have been published.

Timeline

Published
May 27, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-525207.5For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a DoS via bypassing oCVE-2025-525217.1Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attCVE-2025-52536.5Allocation of Resources Without Limits or Throttling vulnerability in Kron Technologies Kron PAM allows HTTP DoS. This issue affects Kron PCVE-2025-525322.0A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmdCVE-2025-525338.7Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromiCVE-2025-525345.3Improper bound check within AMD CPU microcode can allow a malicious guest to write to host memory, potentially resulting in loss of integritCVE-2025-525366.7Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting iCVE-2025-525388.0Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resultingCVE-2025-525397.3A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interfaceCVE-2025-52546.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kron Technologies Kron PAM alloCVE-2025-525408.5An improper input validation vulnerability within the AMD Platform Management Framework (PMF) Driver can allow a local attacker to write OutCVE-2025-525417.3A DLL hijacking vulnerability in Vivado could allow a local attacker to achieve privilege escalation, potentially resulting in arbitrary cod
CVE-2025-5252: Critical severity, CVSS 9.8 | Vulnix