CVE-2025-4862

MEDIUM

Phpgurukul Directory Management System - Code Injection

Title source: rule

Description

A vulnerability, which was classified as problematic, has been found in PHPGurukul Directory Management System 2.0. Affected by this issue is some unknown functionality of the file /searchdata.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

References (5)

[Exploit, Third Party Advisory] https://github.com/Schatten-42/MyCVE/issues/4

[Product] https://phpgurukul.com/

[Permissions Required] https://vuldb.com/?ctiid.309404

[Third Party Advisory, VDB Entry] https://vuldb.com/?id.309404

[Third Party Advisory, VDB Entry] https://vuldb.com/?submit.575355

Scores

CVSS v3 4.3

EPSS 0.0010

EPSS Percentile 26.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Classification

CWE

CWE-94 CWE-79

Status published

Affected Products (1)

phpgurukul/directory_management_system

Timeline

Published May 18, 2025

Tracked Since Feb 18, 2026