CVE-2025-2473
Published: 18 March 2025
Summary
CVE-2025-2473 is a high-severity Injection (CWE-74) vulnerability in Phpgurukul Company Visitor Management System. Its CVSS base score is 7.3 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 9.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 RA-5 (Vulnerability Monitoring and Scanning) and SI-10 (Information Input Validation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly prevents SQL injection by requiring validation and sanitization of the username input in the Sign In component's /index.php.
Mandates identification, reporting, and correction of the specific SQL injection flaw in CVE-2025-2473.
Requires vulnerability scanning to identify SQL injection issues like this CVE and subsequent remediation.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
SQL injection in public-facing web application login enables exploitation (T1190), database data collection via arbitrary queries (T1213.006), and data destruction such as dropping tables (T1485).
NVD Description
A vulnerability was found in PHPGurukul Company Visitor Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /index.php of the component Sign In. The manipulation of the argument username leads to…
more
sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Deeper analysisAI
CVE-2025-2473 is a critical SQL injection vulnerability (CWE-74, CWE-89) in PHPGurukul Company Visitor Management System 2.0. The flaw resides in an unknown functionality of the /index.php file within the Sign In component, where manipulation of the username argument triggers the injection. Published on 2025-03-18, it carries a CVSS 3.1 base score of 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L).
Remote attackers require no privileges, authentication, or user interaction to exploit this vulnerability over the network with low complexity. Successful exploitation enables limited impacts on confidentiality, integrity, and availability, such as unauthorized data access, modification, or disruption via injected SQL queries.
Advisories provide further details via VulDB entries (ctiid.299966, id.299966, submit.517266) and a GitHub vulnerability report (l8BL/vul_report/issues/2), with the vendor site at phpgurukul.com. The exploit has been publicly disclosed and may be used by attackers.
Details
- CWE(s)