CVE-2025-5375

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in PHPGurukul HPGurukul Online Birth Certificate System 2.0. It has been classified as critical. Affected is an unknown function of the file /admin/registered-users.php. The manipulation of the argument del leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
PHPGurukul	HPGurukul Online Birth Certificate System	2.0

References

https://github.com/f1rstb100d/myCVE/issues/29Exploit, Issue Tracking, Third Party Advisory
https://phpgurukul.com/Product
https://vuldb.com/?ctiid.310668Permissions Required
https://vuldb.com/?id.310668Third Party Advisory, VDB Entry
https://vuldb.com/?submit.587394Third Party Advisory, VDB Entry
https://github.com/f1rstb100d/myCVE/issues/29Exploit, Issue Tracking, Third Party Advisory

Timeline

Published: May 31, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-537545.1This vulnerability exists in Digisol DG-GR6821AC Router due to hard-coded Root Access Credentials in system configuration of the device firm CVE-2025-537555.1This vulnerability exists in Digisol DG-GR6821AC Router due to storage of credentials and PINS without encryption in the device firmware. An CVE-2025-537568.7This vulnerability exists in Digisol DG-GR6821AC Router due to cleartext transmission of credentials in its web management interface. A remo CVE-2025-537578.7This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associa CVE-2025-537585.1This vulnerability exists in Digisol DG-GR6821AC Router due to use of default admin credentials at its web management interface. An attacker CVE-2025-537597.8Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-53769.8A vulnerability was found in SourceCodester Health Center Patient Record Management System 1.0. It has been declared as critical. Affected b CVE-2025-537607.1Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2025-537617.8Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.CVE-2025-537629.9Permissive list of allowed inputs in Microsoft Purview allows an authorized attacker to elevate privileges over a network.CVE-2025-537639.8Improper access control in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.CVE-2025-537655.5Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information local