← Database

CVE-2025-45021

MEDIUM CVSS: 5.3 Published: 2025-04-30 Modified: 2026-06-17

Description

A SQL Injection vulnerability was identified in the admin/edit-directory.php file of the PHPGurukul Directory Management System v2.0. Attackers can exploit this vulnerability via the email parameter in a POST request to execute arbitrary SQL commands.

Affected Platforms

Phpgurukul Directory Management System

Weakness Type

CWE-89

References