CVE-2025-2058
Published: 07 March 2025
Summary
CVE-2025-2058 is a medium-severity Injection (CWE-74) vulnerability in Phpgurukul Emergency Ambulance Hiring Portal. Its CVSS base score is 6.9 (Medium).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 10.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2025-2058 is a critical SQL injection vulnerability affecting PHPGurukul Emergency Ambulance Hiring Portal version 1.0. The flaw resides in an unknown functionality of the file /admin/search.php, where manipulation of the searchdata argument triggers the injection. It is associated with CWEs-74 and CWE-89 and carries a CVSS v3.1 base score of 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L).
Remote attackers can exploit this vulnerability without authentication or user interaction, requiring only network access and low complexity. Successful exploitation enables limited impacts on confidentiality, integrity, and availability through SQL injection techniques.
Advisories and details are available via VulDB entries (ctiid.298813, id.298813, submit.514462), a GitHub issue at https://github.com/12T40910/CVE/issues/4, and the vendor site at https://phpgurukul.com/. The exploit has been publicly disclosed and may be used.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-6224
Vulnerability details
A vulnerability has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. The attack…
more
can be launched remotely. The exploit has been disclosed to the public and may be used.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Unauthenticated SQL injection in public-facing web app (/admin/search.php) enables initial access via exploitation of public-facing application (T1190), data collection from databases (T1213.006), and abuse of server software components per advisory mapping (T1505).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly prevents SQL injection by validating and sanitizing untrusted inputs like the 'searchdata' parameter in /admin/search.php.
Remediates the specific SQL injection flaw through timely identification, reporting, and correction of the vulnerability in the application.
Vulnerability scanning detects SQL injection issues like CVE-2025-2058 in the Emergency Ambulance Hiring Portal.