CVE-2025-9302 in User Management System

Riassunto

di MITRE • 21/08/2025

A vulnerability was identified in PHPGurukul User Management System 1.0. This vulnerability affects unknown code of the file /signup.php. Such manipulation of the argument emailid leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: VulDB
• Divulgazione: 21/08/2025
• Moderazione: accettato
• Voce: VDB-320907
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 9.8 (NVD)
• EPSS: 0.00421
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-9302
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-9302
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-9302/