CVE-2025-1954

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

• CWE-74
• CWE-89

• https://github.com/sorcha-l/cve/blob/main/Human%20Metapneumovirus%20(HMPV)%20%E2%80%93%20Testing%20Management%20System%20%20SQL%20Injection%20Vulnerability.mdExploit, Third Party Advisory
• https://phpgurukul.com/Product
• https://vuldb.com/?ctiid.298555Permissions Required, VDB Entry
• https://vuldb.com/?id.298555Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.510360Third Party Advisory, VDB Entry

Published

Mar 4, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-1948In Eclipse Jetty versions 12.0.0 to 12.0.16 included, an HTT…7.5
• CVE-2025-1949A vulnerability, which was classified as problematic, has be…6.1
• CVE-2025-1950IBM Hardware Management Console - Power Systems V10.2.1030.0…7.8
• CVE-2025-1951IBM Hardware Management Console - Power Systems V10.2.1030.0…6.7
• CVE-2025-1952A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-1953A vulnerability has been found in vLLM AIBrix 0.2.0 and clas…2.6
• CVE-2025-1955A vulnerability was found in code-projects Online Class and …5.4
• CVE-2025-1956A vulnerability classified as critical has been found in cod…9.8
• CVE-2025-1957A vulnerability classified as problematic was found in code-…5.1
• CVE-2025-1958A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-1959A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-1960CWE-1188: Initialization of a Resource with an Insecure Defa…9.8