CVE-2025-25389

creationtimestamp| type| source ---|---|--- 2025-02-13 17:06:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113997667839106491 2025-02-13 17:17:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li36xzrstv2a 2025-02-13 18:50:23+00:00| seen|...

CVE-2025-25389

A SQL Injection vulnerability exists in the Phpgurukul Land Record System v1.0 within the /admin/forgot-password.php endpoint. The flaw stems from improper neutralization of special elements in the contactno POST request parameter, which allows remote attackers to execute arbitrary code . This vu...