CVE-2025-25355

Summary

CVE-2025-25355 is a SQL injection vulnerability affecting the PHPGurukul Land Record System v1.0, specifically the /admin/bwdates-reports-details.php file. This issue enables remote attackers to execute arbitrary code by manipulating the fromdate POST request parameter. SQL injection vulnerabilities allow attackers to inject malicious SQL statements into a database query, potentially leading to data theft, unauthorized access, or system compromise. This vulnerability underscores the importance of input validation and sanitization in web applications to protect against such attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.