Cyber Posture

CVE-2025-2642

HighPublic PoC

Published: 23 March 2025

Published
23 March 2025
Modified
02 April 2025
KEV Added
Patch
CVSS Score 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS Score 0.0007 21.9th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Description

Adversaries may leverage databases to mine valuable information.

Security Summary

CVE-2025-2642 is a critical SQL injection vulnerability in PHPGurukul Art Gallery Management System version 1.0. The issue resides in an unknown functionality of the file /admin/edit-art-product-detail.php?editid=2, where manipulation of the arguments editid, sprice, or description enables the injection. Classified under CWE-74 and CWE-89, it carries a CVSS v3.1 base score of 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) and was published on 2025-03-23.

Remote attackers require no privileges or user interaction to exploit this vulnerability over the network with low complexity. Successful exploitation allows limited impacts including low-level confidentiality breaches (e.g., data disclosure), integrity alterations (e.g., data modification), and availability disruptions (e.g., denial of service on affected components).

Advisories referenced in VulDB entries (ctiid.300657, id.300657, submit.519769) document the issue, while a GitHub repository (liuhao2638/cve/issues/3) discloses a public exploit. The vendor site at phpgurukul.com provides context on the affected software, though specific patch details are not detailed in available references.

The exploit has been publicly disclosed, increasing the risk of real-world attacks against exposed instances of this management system.

Details

CWE(s)
CWE-74CWE-89

Affected Products

phpgurukul
art gallery management system
1.0

MITRE ATT&CK Enterprise Techniques

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
T1505 Server Software Component Persistence
Adversaries may abuse legitimate extensible development features of servers to establish persistent access to systems.
T1213.006 Databases Collection
Adversaries may leverage databases to mine valuable information.
Why these techniques?

SQL injection in public-facing web application (/admin/edit-art-product-detail.php) enables exploitation of public-facing apps (T1190), abuse of server software components (T1505 as noted in advisory), and collection from databases via arbitrary queries (T1213.006).

References