Description
A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System 1.3. Affected is an unknown function of the file view-invoice.php. The manipulation of the argument invid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS 3.1 8.8/10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| PHPGurukul | Dairy Farm Shop Management System | 1.3 |
References
- https://github.com/f1rstb100d/myCVE/issues/137Exploit, Issue Tracking
- https://phpgurukul.com/Product
- https://vuldb.com/?ctiid.316290Permissions Required, VDB Entry
- https://vuldb.com/?id.316290Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.615231Third Party Advisory, VDB Entry
- https://github.com/f1rstb100d/myCVE/issues/137Exploit, Issue Tracking
Timeline
- Published
- Jul 14, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed