CVE-2025-3976
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Apr 27, 2025
Updated: May 7, 2025
CWE ID 89
CWE ID 74
Summary
CVE-2025-3976 is a critical vulnerability identified in PHPGurukul COVID19 Testing Management System 1.0. It affects an unknown function within the file /new-user-testing.php. An attacker can exploit this issue by manipulating the mobilenumber argument, resulting in SQL injection. The vulnerability can be exploited remotely, and the disclosure of the exploit to the public increases the risk. Other parameters may also be susceptible to similar attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.