CVE-2025-2649
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Mar 23, 2025
Updated: Mar 27, 2025
CWE ID 312
Summary
CVE-2025-2649 is a critical vulnerability discovered in the PHPGurukul Doctor Appointment Management System version 1.0. The issue lies within the unspecified code of the file /check-appointment.php and stems from an SQL injection vulnerability. Malicious users can exploit this flaw by manipulating the searchdata argument in a remote attack. The exploit for this vulnerability has been made public, increasing the risk of potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Tableau Server
Affected Vendors
- Tableau Software