CVE-2025-2680
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Mar 24, 2025
Updated: Mar 26, 2025
CWE ID 908
Summary
CVE-2025-2680 is a critical vulnerability affecting the PHPGurukul Bank Locker Management System 1.0. The issue lies in an unknown functionality of the file /edit-assign-locker.php?ltid=1. A sql injection vulnerability is present, which can be triggered by manipulating the argument mobilenumber. This vulnerability allows remote attackers to exploit the system and gain unauthorized access. The exploit for this vulnerability has been publicly disclosed, increasing the risk for potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Phusion Passenger
Affected Vendors
- Phusion