[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2025-7481":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":31,"cwes":32,"cpes":35,"technologies":37,"references":39,"score":45,"epss_score":46,"epss_percentile":47,"is_kev":48,"cisa_kev_date_added":49,"cisa_kev_due_date":49,"cisa_ssvc":50,"attack_mappings":60,"exploits":97},67142,"CVE-2025-7481","EUVD-2025-21227","A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been classified as critical. This affects an unknown part of the file \u002Fusers\u002Fprofile.php. The manipulation of the argument firstname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.","2025-07-12T17:15:00Z",{"cvss_v2.0":10,"cvss_v3.1":18,"cvss_v4.0":25},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",6.5,"NETWORK","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL","LOW",{"scope":19,"version":20,"baseScore":21,"attackVector":13,"baseSeverity":22,"vectorString":23,"integrityImpact":22,"userInteraction":24,"attackComplexity":17,"availabilityImpact":22,"privilegesRequired":17,"confidentialityImpact":22},"UNCHANGED","3.1",8.8,"HIGH","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NONE",{"Safety":26,"version":27,"Recovery":26,"baseScore":28,"Automatable":26,"attackVector":13,"baseSeverity":17,"valueDensity":26,"vectorString":29,"exploitMaturity":30,"providerUrgency":26,"userInteraction":24,"attackComplexity":17,"attackRequirements":24,"privilegesRequired":17,"subIntegrityImpact":24,"vulnIntegrityImpact":17,"integrityRequirement":26,"modifiedAttackVector":26,"subAvailabilityImpact":24,"vulnAvailabilityImpact":17,"availabilityRequirement":26,"modifiedUserInteraction":26,"modifiedAttackComplexity":26,"subConfidentialityImpact":24,"vulnConfidentialityImpact":17,"confidentialityRequirement":26,"modifiedAttackRequirements":26,"modifiedPrivilegesRequired":26,"modifiedSubIntegrityImpact":26,"modifiedVulnIntegrityImpact":26,"vulnerabilityResponseEffort":26,"modifiedSubAvailabilityImpact":26,"modifiedVulnAvailabilityImpact":26,"modifiedSubConfidentialityImpact":26,"modifiedVulnConfidentialityImpact":26},"NOT_DEFINED","4.0",2.1,"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X","PROOF_OF_CONCEPT",true,[33,34],"CWE-74","CWE-89",[36],"cpe:2.3:a:phpgurukul:vehicle_parking_management_system:1.13:*:*:*:*:*:*:*",[38],"Phpgurukul Vehicle Parking Management System",[40,41,42,43,44],"https:\u002F\u002Fgithub.com\u002Ff1rstb100d\u002FmyCVE\u002Fissues\u002F111","https:\u002F\u002Fphpgurukul.com\u002F","https:\u002F\u002Fvuldb.com\u002F?ctiid.316131","https:\u002F\u002Fvuldb.com\u002F?id.316131","https:\u002F\u002Fvuldb.com\u002F?submit.610569",0.46,0.00397,0.3363,false,null,{"timestamp":51,"automatable":52,"tech_impact":53,"exploitation":54,"cisa_decision":55,"cisa_remediation_timeline":59},"2025-07-14T16:17:44.228896Z","no","partial","poc",{"vector":56,"decision":57,"priority":58},"CISAv1\u002FE:P\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T19:12:46.982287\u002F","track_star","medium","60D",[61,67,76,84,90],{"name":62,"source":63,"tactics":64,"technique_id":66},"Exploit Public-Facing Application","attack_vector",[65],"initial-access","T1190",{"name":68,"source":69,"cwe_ids":70,"tactics":71,"capec_ids":73,"technique_id":75},"Obfuscated Files or Information","capec",[33],[72],"stealth",[74],"CAPEC-267","T1027",{"name":77,"source":69,"cwe_ids":78,"tactics":79,"capec_ids":81,"technique_id":83},"Dynamic Linker Hijacking",[33],[80,72],"execution",[82],"CAPEC-13","T1574.006",{"name":85,"source":69,"cwe_ids":86,"tactics":87,"capec_ids":88,"technique_id":89},"Path Interception by PATH Environment Variable",[33],[80,72],[82],"T1574.007",{"name":91,"source":69,"cwe_ids":92,"tactics":93,"capec_ids":95,"technique_id":96},"Prevent Command History Logging",[33],[94],"defense-impairment",[82],"T1690",[98],{"link":40}]