CVE-2025-7479 PUBLISHED

PHPGurukul Vehicle Parking Management System view--detail.php sql injection

Assigner: VulDB
Reserved: 11.07.2025 Published: 12.07.2025 Updated: 15.07.2025

A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /users/view--detail.php. The manipulation of the argument viewid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CVSS Score: 5.3

Product Status

Vendor PHPGurukul
Product Vehicle Parking Management System
Versions
  • Version 1.13 is affected

References

Problem Types

  • SQL Injection CWE
  • Injection CWE