CVE-2025-4109
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Apr 30, 2025
Updated: May 13, 2025
CWE ID 74
CWE ID 89
Summary
CVE-2025-4109 is a critical vulnerability identified in the PHPGurukul Pre-School Enrollment System 1.0. This issue lies in an unknown functionality of the /admin/edit-subadmin.php file, which is susceptible to SQL injection. The manipulation of the mobilenumber argument triggers the vulnerability, allowing remote attacks. The exploit for this vulnerability has been made public, increasing the risk of exploitation and potential impact on other parameters.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.