CVE-2025-6911

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in PHPGurukul Student Record System 3.2. It has been declared as critical. This vulnerability affects unknown code of the file /manage-subjects.php. The manipulation of the argument del leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jun 30, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-691108.1Unauthenticated Local File Inclusion in AirSupply <= 2.0.0 versions.CVE-2025-691119.8Unauthenticated PHP Object Injection in Reisen <= 1.4.1 versions.CVE-2025-691128.1Unauthenticated Local File Inclusion in Planty <= 1.14.0 versions.CVE-2025-691138.1Unauthenticated Local File Inclusion in Nexio <= 1.10.0 versions.CVE-2025-691148.1Unauthenticated Local File Inclusion in MaxiNet <= 1.2.10 versions.CVE-2025-691158.1Unauthenticated Local File Inclusion in LuxMed | Medicine & Healthcare Doctor WordPress Theme <= 1.2.2 versions.CVE-2025-691168.1Unauthenticated Local File Inclusion in Iona <= 1.0.8 versions.CVE-2025-691178.1Unauthenticated Local File Inclusion in Ingenioso <= 1.14.0 versions.CVE-2025-691188.1Unauthenticated Local File Inclusion in CopyPress <= 1.4.5 versions.CVE-2025-691198.1Unauthenticated Local File Inclusion in Corbesier <= 1.15.0 versions.CVE-2025-69128.8A vulnerability was found in PHPGurukul Student Record System 3.2. It has been rated as critical. This issue affects some unknown processingCVE-2025-691208.1Unauthenticated Local File Inclusion in Dazzle <= 1.0.0 versions.
CVE-2025-6911: High severity, CVSS 8.8 | Vulnix