CVE-2025-4698

creationtimestamp| type| source ---|---|--- 2025-05-15 15:03:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvi3l4m22...

CVE-2025-4698

The CVE-2025-4698 entry concerns PHPGurukul Directory Management System 2.0. A SQL injection vulnerability exists in the /admin/forget-password.php file, exploitable by manipulating the email parameter. This vulnerability is remote-exploitable and is described across multiple sources as critical/...

CVE-2025-4698 PHPGurukul Directory Management System forget-password.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Directory Management System 2.0. This affects an unknown part of the file /admin/forget-password.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has...