CVE-2025-2372

creationtimestamp| type| source ---|---|--- 2025-03-17 10:54:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7756 2025-03-17 12:01:12+00:00| seen| Telegram/GZuMtE7tvqUUXxVbM6zfoPB-Bc-Xdm5Sf6zYaWo4RQQHsE 2025-03-17 13:17:07+00:00| seen| https://t.me/cvedetector/20455...

CVE-2025-2372

A vulnerability classified as critical has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This affects an unknown part of the file /password-recovery.php of the component Password Recovery Page. The manipulation of the argument username leads to sql injection. It is...

CVE-2025-2372

PHPGurukul Human Metapneumovirus Testing Management System 1.0 has a SQL injection vulnerability in /password-recovery.php (username parameter). Exploitation is remote and publicly disclosed. Root cause: lack of input validation for the username leading to SQL query manipulation. Impact: confiden...

CVE-2025-2372 PHPGurukul Human Metapneumovirus Testing Management System Password Recovery Page password-recovery.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This affects an unknown part of the file /password-recovery.php of the component Password Recovery Page. The manipulation of the argument username leads to sql injection. It is...