CVE-2025-10604

CRITICAL 9.8CVE-2025-10604 · Published 17/09/2025 · updated 26/09/2026

Package	Affected versions	Patched versions
online discussion forum emiloi	`= 1.0`	No fix yet

Description

A vulnerability was identified in PHPGurukul Online Discussion Forum 1.0. This affects an unknown part of the file /admin/edit_member.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.

References

maximdevere/cve · Exploit
phpgurukul.com · Product
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free