CVE-2025-1580

CVSS 3.1 Score 6.3 of 10 (medium)

Details

Published Feb 23, 2025
CWE ID 89
CWE ID 74

Summary

CVE-2025-1580 is a critical vulnerability affecting the PHPGurukul Nipah Virus Testing Management System version 1.0. The issue lies within an unknown function of the file /search-report-result.php, where manipulation of the argument searchdata allows for SQL injection. This vulnerability can be exploited remotely and the exploit has been disclosed to the public. Contradictory parameter names have been identified as potentially being involved, but specific details have not been provided.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share