CVE-2025-25354

Summary

CVE-2025-25354 is a new SQL injection vulnerability that has been identified in the /admin/admin-profile.php file of the PHPGurukul Land Record System v1.0. This issue allows remote attackers to execute arbitrary code by exploiting the contactnumber POST request parameter in SQL queries. Successful exploitation of this vulnerability could result in unauthorized access to sensitive data or even system takeover. The vulnerability poses a significant risk to organizations using this software and urges immediate patching or mitigation measures. SQL injection attacks can be devastating, and this specific vulnerability, CVE-2025-25354, highlights the importance of securing web applications against such threats.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.