CVE-2025-25357
Published: 13 February 2025
Summary
CVE-2025-25357 is a high-severity SQL Injection (CWE-89) vulnerability in Phpgurukul Land Record System. Its CVSS base score is 7.2 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 14.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 RA-5 (Vulnerability Monitoring and Scanning) and SI-10 (Information Input Validation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly prevents SQL injection by validating and sanitizing the email POST parameter in /admin/contactus.php before database queries.
Requires timely identification, reporting, and correction of the specific SQL injection flaw in PHPGurukul Land Record System v1.0.
Scans for vulnerabilities like this SQL injection in the admin contactus.php component and remediates based on risk assessment.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
SQL Injection vulnerability in public-facing web application (/admin/contactus.php) enables remote attackers to execute arbitrary code.
NVD Description
A SQL Injection vulnerability was found in /admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the email POST request parameter.
Deeper analysisAI
CVE-2025-25357 is a SQL injection vulnerability (CWE-89) affecting the /admin/contactus.php component in PHPGurukul Land Record System version 1.0. Published on 2025-02-13, it enables remote attackers to execute arbitrary code by injecting malicious payloads via the email POST request parameter. The issue carries a CVSS v3.1 base score of 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), indicating high severity due to its potential for significant impact.
Exploitation requires high privileges (PR:H), such as administrative access, and can be performed remotely over the network (AV:N) with low complexity (AC:L) and no user interaction (UI:N). Attackers with the necessary permissions can inject SQL payloads into the email parameter, leading to arbitrary code execution and high impacts on confidentiality, integrity, and availability (C:H/I:H/A:H).
References include writeups hosted on GitHub at https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20Emails.pdf, which detail the SQL injection vulnerability in the email parameter but do not specify mitigation steps or patches.
Details
- CWE(s)