CVE-2025-25389

creationtimestamp| type| source ---|---|--- 2025-02-13 17:06:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113997667839106491 2025-02-13 17:17:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li36xzrstv2a 2025-02-13 18:50:23+00:00| seen|...

CVE-2025-25389

CVE-2025-25389 is a SQL Injection vulnerability in Phpgurukul Land Record System v1.0, exploitable via the /admin/forgot-password.php endpoint and the contactno POST parameter. The issue allows remote attackers to execute arbitrary code and has a CVSSv3.1 base score of 9.8 (CRITICAL) with network...