CVE-2025-2738

Summary

CVE-2025-2738 is a critical vulnerability identified in the PHPGurukul Old Age Home Management System version 1.0. The issue lies within the file /admin/manage-scdetails.php, where an SQL injection vulnerability arises due to the manipulation of the argument namesc. This weakness allows remote attackers to execute malicious SQL statements, posing a significant risk to the affected system. The exploit for this vulnerability has already been disclosed to the public, increasing the urgency for system administrators to apply the necessary patches to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.