CVE-2025-3971
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Apr 27, 2025
Updated: May 7, 2025
CWE ID 89
CWE ID 74
Summary
CVE-2025-3971 is a critical vulnerability discovered in PHPGurukul COVID19 Testing Management System version 1.0. This issue lies in an unidentified functionality of the file /add-phlebotomist.php, which is susceptible to SQL injection. By manipulating the empid argument, attackers can execute malicious SQL queries, gaining unauthorized access remotely. Public disclosure of the exploit increases the risk of potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.