CVE-2025-5373

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in PHPGurukul Online Birth Certificate System 2.0 and classified as critical. This vulnerability affects unknown code of the file /admin/users-applications.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74CWE-89

Affected software

VendorProductVersions
PHPGurukulOnline Birth Certificate System2.0

References

Timeline

Published
May 31, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-537307.8Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.CVE-2025-537318.4Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-537327.8Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-537338.4Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2025-537347.8Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.CVE-2025-537357.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-537366.2Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.CVE-2025-537377.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-537387.8Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2025-537397.8Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locaCVE-2025-53748.8A vulnerability was found in PHPGurukul Online Birth Certificate System 2.0 and classified as critical. This issue affects some unknown procCVE-2025-537408.4Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-5373: High severity, CVSS 8.8 | Vulnix