CVE-2025-45885

Summary

PHPGURUKUL Vehicle Parking Management System v1.13 is vulnerable to SQL injection in the /vpms/users/login.php file. Attackers can inject malicious code from the parameter 'emailcont' and use it directly in SQL queries.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

Additional References

• https://github.com/lintian31/vpm-system/blob/main/Vehicle%20parking%20Management%20System.md

References

• https://github.com/lintian31/vpm-system/blob/main/Vehicle%20parking%20Management%20System.md

• ←Previous
• Next→