CVE-2025-5553

HIGH

PHPGurukul Rail Pass Management System 1.0 - SQL Injection

Title source: llm

Description

A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /download-pass.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Exploits (1)

exploitdb WORKING POC
by yozgatalperen1 · textwebappsphp
https://www.exploit-db.com/exploits/51790

References (6)

Scores

CVSS v3 7.3
EPSS 0.0029
EPSS Percentile 52.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Details

CWE
CWE-74 CWE-89
Status published
Products (1)
phpgurukul/rail_pass_management_system 1.0
Published Jun 04, 2025
Tracked Since Feb 18, 2026