CVE-2025-9729

Summary

A vulnerability was detected in PHPGurukul Online Course Registration 3.1. This vulnerability affects unknown code of the file /admin/student-registration.php. Performing manipulation of the argument studentname results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Affected Software

Weaknesses

• CWE-89: SQL Injection
• CWE-74: Injection

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

Additional References

• https://github.com/shiqumeng/myCVE/issues/10

References

• https://vuldb.com/?id.322018
• https://vuldb.com/?ctiid.322018
• https://vuldb.com/?submit.639710
• https://github.com/shiqumeng/myCVE/issues/10
• https://phpgurukul.com/

• ←Previous
• Next→