critical9.8
CVE-2025-45885
PHPGURUKUL Vehicle Parking Management System v1.13 is vulnerable to SQL injection in the /vpms/users/login.php file.
Impact
PHPGURUKUL Vehicle Parking Management System v1.13 is vulnerable to SQL injection in the /vpms/users/login.php file. Attackers can inject malicious code from the parameter 'emailcont' and use it directly in SQL queries.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpgurukul | Vehicle Parking Management System | Version 1.13 |