CVE-2025-2677
CVSS 3.1 Score 10 of 10 (high)
Details
Published Mar 24, 2025
Updated: Mar 26, 2025
CWE ID 434
Summary
CVE-2025-2677 is a critical vulnerability identified in the PHPGurukul Bank Locker Management System 1.0. The issue lies within unknown code in the file /changeidproof.php, allowing for sql injection through the manipulation of the editid argument. This vulnerability can be exploited remotely, making it a significant security risk. The exploit for this issue has been made public, increasing the threat level for affected systems.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Chaty Pro Plugin