CVE-2025-4026
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Apr 28, 2025
Updated: May 5, 2025
CWE ID 74
CWE ID 89
Summary
CVE-2025-4026 is a critical vulnerability affecting the PHPGurukul Nipah Virus Testing Management System version 1.0. An attacker can exploit this issue by manipulating the arguments adminname and mobilenumber in the file /profile.php, resulting in SQL injection. This vulnerability allows remote attacks, and the exploit has been made public, increasing the risk for potential exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.