CVE-2025-2090— PHPGurukul Pre-School Enrollment System Sub Admin add-subadmin.php access control
Quick assessment
Affected
PHPGurukul Pre-School Enrollment System
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
PHPGurukul Pre-School Enrollment System是PHPGurukul公司的一个基于 Web 的学前招生系统。 PHPGurukul Pre-School Enrollment System 1.0版本存在安全漏洞，该漏洞源于Sub Admin Handler组件的add-subadmin.php文件操作不当，可能导致访问控制不当。
Possible ATT&CK Techniques 1 AI
T1078 · Valid Accounts
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-2090
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PHPGurukul Pre-School Enrollment System Sub Admin add-subadmin.php access control
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php of the component Sub Admin Handler. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
访问控制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
PHPGurukul Pre-School Enrollment System 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PHPGurukul Pre-School Enrollment System是PHPGurukul公司的一个基于 Web 的学前招生系统。 PHPGurukul Pre-School Enrollment System 1.0版本存在安全漏洞，该漏洞源于Sub Admin Handler组件的add-subadmin.php文件操作不当，可能导致访问控制不当。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| PHPGurukul | Pre-School Enrollment System | 1.0 | - |
|
II. Public POCs for CVE-2025-2090
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-2090
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-2090 (3)
-
CVE-2025-2090 PHPGurukul Pre-School Enrollment System Sub Admin add-subadmin.php access control signature permissions-required
-
Submit #515017: PHPGurukul Pre-School Enrollment System 1.0 access control third-party-advisory
Security Blog Posts for CVE-2025-2090 (1)
Other References for CVE-2025-2090 (1)
Same Patch Batch · PHPGurukul · 2025-03-07 · 11 CVEs total
| CVE-2025-2057 | 7.3 HIGH | PHPGurukul Emergency Ambulance Hiring Portal about-us.php sql injection |
| CVE-2025-2058 | 7.3 HIGH | PHPGurukul Emergency Ambulance Hiring Portal search.php sql injection |
| CVE-2025-2059 | 7.3 HIGH | PHPGurukul Emergency Ambulance Hiring Portal booking-details.php sql injection |
| CVE-2025-2060 | 7.3 HIGH | PHPGurukul Emergency Ambulance Hiring Portal admin-profile.php sql injection |
| CVE-2025-2088 | 7.3 HIGH | PHPGurukul Pre-School Enrollment System profile.php sql injection |
| CVE-2025-2051 | 6.3 MEDIUM | PHPGurukul Apartment Visitors Management System search-visitor.php sql injection |
| CVE-2025-2052 | 6.3 MEDIUM | PHPGurukul Apartment Visitors Management System forgot-password.php sql injection |
| CVE-2025-2053 | 6.3 MEDIUM | PHPGurukul Apartment Visitors Management System visitor-detail.php sql injection |
| CVE-2025-2084 | 3.5 LOW | PHPGurukul Human Metapneumovirus Testing Management System Search Report Page search-repor |
| CVE-2025-2093 | 3.1 LOW | PHPGurukul Online Library Management System change-password.php password recovery |
IV. Related Vulnerabilities
Same product: Pre-School Enrollment System
-
CVE-2025-6323
PHPGurukul Pre-School Enrollment System enrollment.php sql i -
CVE-2025-6322
PHPGurukul Pre-School Enrollment System visit.php sql inject -
CVE-2025-6321
PHPGurukul Pre-School Enrollment System add-subadmin.php sql -
CVE-2025-6320
PHPGurukul Pre-School Enrollment System add-class.php sql in -
CVE-2025-6319
PHPGurukul Pre-School Enrollment System add-teacher.php sql
Same vendor: PHPGurukul
-
CVE-2026-90851
PHPGurukul Hostel Management System checklogin.php access co -
CVE-2026-90850
PHPGurukul Hostel Management System manage-students.php cros -
CVE-2026-90846
PHPGurukul Daily Expense Tracker System forgot-password.php -
CVE-2026-90845
PHPGurukul Daily Expense Tracker System sidebar.php cross si -
CVE-2026-90844
PHPGurukul Daily Expense Tracker System Login index.php sql
Same weakness: CWE-284
-
CVE-2026-102795
Apache Traffic Server: SNI to Host header matching policy is -
CVE-2026-63045
Apache HTTP Server: mod_proxy_ftp PASV address handling -
CVE-2026-76142
Genians, Inc. Genian NAC/ZTNA Improper Access Control on the -
CVE-2026-103534
David-Crty databasement Snapshot Model snapshots SnapshotPol -
CVE-2026-102132
Kiteworks Core Privilege Escalation through Improper Access
V. Comments for CVE-2025-2090
No comments yet