CVE-2025-8134

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical was found in PHPGurukul BP Monitoring Management System 1.0. This vulnerability affects unknown code of the file /bwdates-report-result.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
PHPGurukul	BP Monitoring Management System	1.0

References

https://github.com/LagonGit/ReportCVE/issues/13Exploit, Issue Tracking, Third Party Advisory
https://github.com/LagonGit/ReportCVE/issues/14Broken Link
https://phpgurukul.com/Product
https://vuldb.com/?ctiid.317530Permissions Required, VDB Entry
https://vuldb.com/?id.317530Third Party Advisory, VDB Entry
https://vuldb.com/?submit.619810Third Party Advisory, VDB Entry
https://vuldb.com/?submit.619813Third Party Advisory, VDB Entry
https://github.com/LagonGit/ReportCVE/issues/13Exploit, Issue Tracking, Third Party Advisory

Timeline

Published: Jul 25, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-81358.8A vulnerability, which was classified as critical, has been found in itsourcecode Insurance Management System 1.0. This issue affects some u CVE-2025-81367.5A vulnerability, which was classified as critical, was found in TOTOLINK A702R 4.0.0-B20230721.1521. Affected is an unknown function of the CVE-2025-81378.8A vulnerability has been found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this vulnerability is an unkno CVE-2025-81388.8A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this issue is some unknown function CVE-2025-81398.8A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been classified as critical. This affects an unknown part of the fi CVE-2025-81408.8A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been declared as critical. This vulnerability affects unknown code CVE-2025-81418.8The Redirection for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in CVE-2025-81428.8The Soledad theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.6.7 via the 'header_layout' pa CVE-2025-81436.4The Soledad theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pcsml_smartlists_h’ parameter in all versions up to, a CVE-2025-81458.8The Redirection for Contact Form 7 plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.4 vi CVE-2025-81466.4The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's TypeOut Text widget in all ve CVE-2025-81474.3The LWSCache plugin for WordPress is vulnerable to unauthorized modification of data due to improper authorization on the lwscache_activateP