CVE-2025-5373

A vulnerability has been found in PHPGurukul Online Birth Certificate System 2.0 and classified as critical. This vulnerability affects unknown code of the file /admin/users-applications.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

• CWE-74
• CWE-89
• CWE-89

• https://github.com/f1rstb100d/myCVE/issues/27Exploit, Issue Tracking, Third Party Advisory
• https://phpgurukul.com/Product
• https://vuldb.com/?ctiid.310666Permissions Required
• https://vuldb.com/?id.310666Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.587392Third Party Advisory, VDB Entry
• https://github.com/f1rstb100d/myCVE/issues/27Exploit, Issue Tracking, Third Party Advisory

Published

May 31, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-53724Access of resource using incompatible type ('type confusion'…7.8
• CVE-2025-53725Access of resource using incompatible type ('type confusion'…7.8
• CVE-2025-53726Access of resource using incompatible type ('type confusion'…7.8
• CVE-2025-53727Improper neutralization of special elements used in an sql c…8.8
• CVE-2025-53728Exposure of sensitive information to an unauthorized actor i…6.5
• CVE-2025-53729Improper access control in Azure File Sync allows an authori…7.8
• CVE-2025-53730Use after free in Microsoft Office Visio allows an unauthori…7.8
• CVE-2025-53731Use after free in Microsoft Office allows an unauthorized at…8.4
• CVE-2025-53732Heap-based buffer overflow in Microsoft Office allows an una…7.8
• CVE-2025-53733Incorrect conversion between numeric types in Microsoft Offi…8.4
• CVE-2025-53734Use after free in Microsoft Office Visio allows an unauthori…7.8
• CVE-2025-53735Use after free in Microsoft Office Excel allows an unauthori…7.8