← Database

CVE-2025-45885

CRITICAL CVSS: 9.8 Published: 2025-05-09 Modified: 2026-06-17

Description

PHPGURUKUL Vehicle Parking Management System v1.13 is vulnerable to SQL injection in the /vpms/users/login.php file. Attackers can inject malicious code from the parameter 'emailcont' and use it directly in SQL queries.

Affected Platforms

Phpgurukul Vehicle Parking Management System

Weakness Type

CWE-89

References