CVE-2025-2640
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Mar 23, 2025
Updated: Apr 2, 2025
CWE ID 74
CWE ID 89
Summary
CVE-2025-2640 is a critical vulnerability affecting the PHPGurukul Doctor Appointment Management System version 1.0. The issue lies in the handling of user input in the file /doctor/appointment-bwdates-reports-details.php, which leads to SQL injection. An attacker can manipulate the fromdate/todate arguments and launch a remote attack, exploiting the disclosed vulnerability. The potential impact includes unauthorized access to sensitive data or system compromise.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- PHPGurukul Doctor Appointment Management System
Affected Vendors
- Phpgurukul