Cyber Posture

CVE-2025-1952

HighPublic PoC

Published: 04 March 2025

Published
04 March 2025
Modified
03 April 2025
KEV Added
—
Patch
—
CVSS Score 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS Score 0.0018 39.5th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Description

Adversaries may leverage databases to mine valuable information.

Security Summary

CVE-2025-1952 is a critical SQL injection vulnerability in PHPGurukul Restaurant Table Booking System 1.0. The flaw resides in an unknown function within the file /admin/password-recovery.php, where manipulation of the username or mobileno arguments enables SQL code injection. Published on 2025-03-04, it carries a CVSS v3.1 base score of 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) and is associated with CWE-74 and CWE-89.

The vulnerability is exploitable remotely by unauthenticated attackers with low complexity, requiring no user interaction or privileges. Successful exploitation allows attackers to achieve low-level impacts on confidentiality, integrity, and availability, potentially enabling unauthorized data access, modification, or disruption via injected SQL queries.

Advisories and details are documented on VULDB (https://vuldb.com/?ctiid.298542, https://vuldb.com/?id.298542, https://vuldb.com/?submit.509955) and a GitHub issue (https://github.com/zrlianc/CVE/issues/1), with the vendor site at https://phpgurukul.com/. The exploit has been publicly disclosed and may be used by attackers.

Details

CWE(s)
CWE-74CWE-89

Affected Products

phpgurukul
restaurant table booking system
1.0

MITRE ATT&CK Enterprise Techniques

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
T1212 Exploitation for Credential Access Credential Access
Adversaries may exploit software vulnerabilities in an attempt to collect credentials.
attack.mitre.org →
T1213.006 Databases Collection
Adversaries may leverage databases to mine valuable information.
attack.mitre.org →
Why these techniques?

SQL injection in unauthenticated public-facing web app password recovery allows remote exploitation for initial access (T1190), stealing credentials from the database (T1212), and collecting data from databases (T1213.006).

References