SQL Injection in Phpgurukul Dairy Farm Shop Management System
CVE-2025-51671
A SQL injection vulnerability was discovered in the PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability allows remote attackers to execute arbitrary SQL code via the category and categorycode parameters in a POST request to the manage-categories.php file.
Vulnerability class: SQL Injection
EPSS: 0.003 (17.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N.
Affected products
- Phpgurukul Dairy_farm_shop_management_system — versions 1.3
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2025-51671?
- CVE-2025-51671 is a medium-severity vulnerability in Phpgurukul Dairy Farm Shop Management System, classified under SQL Injection. CVSS score: 5.4/10. Published 2025-06-26.
- How severe is CVE-2025-51671?
- Medium severity. CVSS v3 base score is 5.4 out of 10.