CVE-2025-4862
Last modified
CVE-2025-4862 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. A vulnerability, which was classified as problematic, has been found in PHPGurukul Directory Management System 2.0. Affected by this issue is some unknown functionality of the file /searchdata.php. EPSS estimates a 0.39% chance of exploitation in the next 30 days.
Description
A vulnerability, which was classified as problematic, has been found in PHPGurukul Directory Management System 2.0. Affected by this issue is some unknown functionality of the file /searchdata.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Phpgurukul | Directory Management System | 2.0 |
References
- https://github.com/Schatten-42/MyCVE/issues/4Exploit, Third Party Advisory
- https://phpgurukul.com/Product
- https://vuldb.com/?ctiid.309404Permissions Required
- https://vuldb.com/?id.309404Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.575355Third Party Advisory, VDB Entry
- https://github.com/Schatten-42/MyCVE/issues/4Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-4862?
How severe is CVE-2025-4862?
How do I fix CVE-2025-4862?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-48614In rebootWipeUserData of RecoverySystem.java, there is a pos…4.6
- CVE-2025-48615In getComponentName of MediaButtonReceiverHolder.java, there…7.8
- CVE-2025-48616In multiple functions of KeyguardViewMediator.java , there i…3.3
- CVE-2025-48617In overrideConfig of CarrierConfigLoader.java, there is a po…7.8
- CVE-2025-48618In processLaunchBrowser of CommandParamsFactory.java, there …6.8
- CVE-2025-48619In multiple functions of ContentProvider.java, there is a po…8.4
- CVE-2025-48620In onSomePackagesChanged of VoiceInteractionManagerService.j…7.8
- CVE-2025-48621In DefaultTransitionHandler.java, there is a possible way to…7.3
- CVE-2025-48622In ProcessArea of dng_misc_opcodes.cpp, there is a possible …5.5
- CVE-2025-48623In init_pkvm_hyp_vcpu of pkvm.c, there is a possible out of …7.8
- CVE-2025-48624In multiple functions of arm-smmu-v3.c, there is a possible …7.8
- CVE-2025-48625In multiple locations of UsbDataAdvancedProtectionHook.java,…7
Are you affected by CVE-2025-4862?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST