CVE-2025-6913

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in PHPGurukul Student Record System 3.2. Affected is an unknown function of the file /admin-profile.php. The manipulation of the argument aemailid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jun 30, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-691308.8Deserialization of Untrusted Data vulnerability in Pixel Makers Creative INC. Entrepreneur - Booking for Small Businesses WordPress Theme alCVE-2025-691317.5Unauthenticated Arbitrary File Download in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions.CVE-2025-691326.5Subscriber Sensitive Data Exposure in Corpkit <= 1.0.5 versions.CVE-2025-691337.5Subscriber Local File Inclusion in Tourmaster <= 5.4.5 versions.CVE-2025-691347.5Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Helper <= 1.1.4 versions.CVE-2025-691358.5Subscriber SQL Injection in Events Schedule - WordPress Events Calendar Plugin <= 2.7.2 versions.CVE-2025-691368.1Unauthenticated Local File Inclusion in Wanium <= 1.9.8 versions.CVE-2025-691376.5Subscriber Broken Access Control in Genemy <= 1.6.6 versions.CVE-2025-691388.8Subscriber Privilege Escalation in Genemy <= 1.6.6 versions.CVE-2025-691398.6Unauthenticated Arbitrary File Deletion in Car Zone <= 3.7 versions.CVE-2025-69148.8A vulnerability classified as critical was found in PHPGurukul Student Record System 3.2. Affected by this vulnerability is an unknown functCVE-2025-691407.1Unauthenticated Cross Site Scripting (XSS) in SweetDate Core < 1.1.5 versions.
CVE-2025-6913: High severity, CVSS 8.8 | Vulnix