CVE-2025-6912

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in PHPGurukul Student Record System 3.2. It has been rated as critical. This issue affects some unknown processing of the file /manage-students.php. The manipulation of the argument del leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jun 30, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-691208.1Unauthenticated Local File Inclusion in Dazzle <= 1.0.0 versions.CVE-2025-691218.1Unauthenticated Local File Inclusion in Deliciosa <= 1.10.0 versions.CVE-2025-691229.8Unauthenticated PHP Object Injection in SeaFood Company <= 1.4 versions.CVE-2025-691238.1Unauthenticated Local File Inclusion in Snow Club <= 1.1 versions.CVE-2025-691248.1Unauthenticated Local File Inclusion in Especio <= 1.0 versions.CVE-2025-691258.1Unauthenticated Local File Inclusion in Food Drop <= 1.3 versions.CVE-2025-691268.1Unauthenticated Local File Inclusion in Fortius <= 2.3.0 versions.CVE-2025-691279.8Unauthenticated PHP Object Injection in Plumbing <= 1.6 versions.CVE-2025-691288.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in EMV JobCareer allows Path Traversal. This iCVE-2025-6912910.0Unauthenticated Arbitrary File Upload in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions.CVE-2025-69138.8A vulnerability classified as critical has been found in PHPGurukul Student Record System 3.2. Affected is an unknown function of the file /CVE-2025-691308.8Deserialization of Untrusted Data vulnerability in Pixel Makers Creative INC. Entrepreneur - Booking for Small Businesses WordPress Theme al
CVE-2025-6912: High severity, CVSS 8.8 | Vulnix