Beveiligingsadvies

CVE-2025-65380

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-02 00:00:00
Laatst bijgewerkt 2025-12-02 21:58:55
Toegewezen door mitre
CVSS-score 6.5
Status PUBLISHED

Beschrijving

PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username parameter accepts unvalidated user input, which is then concatenated directly into a backend SQL query.