SQL Injection in Phpgurukul Dairy Farm Shop Management System

CVE-2025-51671

A SQL injection vulnerability was discovered in the PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability allows remote attackers to execute arbitrary SQL code via the category and categorycode parameters in a POST request to the manage-categories.php file.

Vulnerability class: SQL Injection

EPSS: 0.003 (17.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2025-51671?
CVE-2025-51671 is a medium-severity vulnerability in Phpgurukul Dairy Farm Shop Management System, classified under SQL Injection. CVSS score: 5.4/10. Published 2025-06-26.
How severe is CVE-2025-51671?
Medium severity. CVSS v3 base score is 5.4 out of 10.