CVE-2025-1588

Summary

CVE-2025-1588 is a critical vulnerability identified in the PHPGurukul Online Nurse Hiring System 1.0. The issue resides in the /admin/manage-nurse.php file and stems from a path traversal flaw. When the argument "profilepic" is manipulated, an attacker can traverse directories up to the "../filedir" location. This vulnerability is remotely exploitable, and the exploit has been made public. Contradictory vulnerability classes have been reported in initial researcher advisories.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.