CVE-2025-5375
Last modified
CVE-2025-5375 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. A vulnerability was found in PHPGurukul HPGurukul Online Birth Certificate System 2.0. It has been classified as critical. EPSS estimates a 0.22% chance of exploitation in the next 30 days.
Description
A vulnerability was found in PHPGurukul HPGurukul Online Birth Certificate System 2.0. It has been classified as critical. Affected is an unknown function of the file /admin/registered-users.php. The manipulation of the argument del leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Phpgurukul | Online Birth Certificate System | 2.0 |
References
- https://github.com/f1rstb100d/myCVE/issues/29Exploit, Issue Tracking, Third Party Advisory
- https://phpgurukul.com/Product
- https://vuldb.com/?ctiid.310668Permissions Required
- https://vuldb.com/?id.310668Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.587394Third Party Advisory, VDB Entry
- https://github.com/f1rstb100d/myCVE/issues/29Exploit, Issue Tracking, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-5375?
How severe is CVE-2025-5375?
How do I fix CVE-2025-5375?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-53743Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not m…5.3
- CVE-2025-53744An incorrect privilege assignment vulnerability [CWE-266] in…7.2
- CVE-2025-53746Rejected reason: Not used
- CVE-2025-53747Rejected reason: Not used
- CVE-2025-53748Rejected reason: Not used
- CVE-2025-53749Rejected reason: Not used
- CVE-2025-53750Rejected reason: Not used
- CVE-2025-53751Rejected reason: Not used
- CVE-2025-53752Rejected reason: Not used
- CVE-2025-53753Rejected reason: Not used
- CVE-2025-53754This vulnerability exists in Digisol DG-GR6821AC Router due …5.1
- CVE-2025-53755This vulnerability exists in Digisol DG-GR6821AC Router due …5.1
Are you affected by CVE-2025-5375?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST