CVE-2025-4028
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Apr 28, 2025
Updated: May 10, 2025
CWE ID 89
CWE ID 74
Summary
CVE-2025-4028 is a critical vulnerability identified in the PHPGurukul COVID19 Testing Management System 1.0. This issue lies within an unknown functionality of the file /profile.php, which can be exploited through a sql injection attack triggered by manipulating the argument mobilenumber. The exploit can be launched remotely, and there is public disclosure of the vulnerability, increasing the risk for potential attacks. Additional parameters may also be affected.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.