CVE-2025-3973 — Vulnetix

CVE-2025-3973 PUBLISHED CVSS 6.900000095367432 MEDIUM

A vulnerability, which was classified as critical, was found in PHPGurukul COVID19 Testing Management System 1.0. This affects an unknown part of the file /check_availability.php. The manipulation of the argument mobnumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

EPSS 0.12% · 30.1th percentile

Risk Scores

CVSS 4.0

6.900000095367432

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

EPSS Score

0.12%

30.1th percentile

Affected Products

Vendor	Product	Versions
PHPGurukul	COVID19 Testing Management System	1.0
phpgurukul	covid19_testing_management_system	1.0

Exploit Intelligence

CIRCL seen: CVE-2025-3973 (circl-sighting)
CIRCL seen: CVE-2025-3973 (circl-sighting)
VDB-306309 | PHPGurukul COVID19 Testing Management System check_availability.php sql injection (circl)
VDB-306309 | CTI Indicators (IOB, IOC, TTP, IOA) (circl)
Submit #557393 | PHPGurukul COVID19 Testing Management System V1.0 SQL Injection (circl)
https://phpgurukul.com/ (circl)
https://github.com/skyrainoh/CVE/issues/3 (cve.org)
CVE-2025-3973.json (github-poc)
CVE-2025-3973.json (github-poc)
CVE-2025-3973.json (github-poc)

…and 2 more exploits

Timeline

Apr 27, 2025 Coalition ESS Score
Apr 27, 2025 CVE Published
Apr 27, 2025 PoC Published
Apr 27, 2025 PoC Published
Apr 28, 2025 EPSS Score
May 7, 2025 CVE Updated
May 10, 2025 EPSS Score
May 22, 2025 EPSS Score
May 23, 2025 Coalition ESS Score
Jun 3, 2025 EPSS Score
Jun 15, 2025 EPSS Score
Jun 27, 2025 EPSS Score

References

Open in Interactive Console →