CVE-2025-10603

5.5 mediumEPSS 0.4%

Medium (5.5) in emiloi online discussion forum. EPSS 0.4% chance of exploitation in the next 30 days.

A vulnerability was determined in PHPGurukul Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_forum/search_result.php. Executing manipulation of the argument Search can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Severity

CVSS 4.0

5.5 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWEs: CWE-74, CWE-89
Published: 2025-09-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

emiloi:online_discussion_forum

References

https://github.com/maximdevere/cve/issues/1
https://phpgurukul.com/
https://vuldb.com/?ctiid.324623
https://vuldb.com/?id.324623
https://vuldb.com/?submit.649867

Check your stack JSON