CVE-2025-4264

CVE-2025-4264 is a critical SQL injection vulnerability affecting PHPGurukul Emergency Ambulance Hiring Portal version 1.0. Specifically, an unknown function within the /admin/edit-ambulance.php file is susceptible to manipulation via the 'dconnum' argument. This flaw allows for remote attackers to execute arbitrary SQL commands, potentially leading to full compromise of the system. The vulnerability carries a CVSS score of 9.8 (Critical), indicating a severe risk due to its network-based attack vector, low attack complexity, and no required user interaction or privileges. Successful exploitation can result in complete loss of confidentiality, integrity, and availability. While there is no evidence of active exploitation in the wild (KEV: No), the exploit has been publicly disclosed, increasing the likelihood of future attacks. There are no known Metasploit or Nuclei modules, nor an ExploitDB entry, but the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness and potential development of exploits.