CVE-2025-2473 Scanner
CVE-2025-2473 Scanner - SQL Injection vulnerability in Company Visitor Management System
Used 2.8k times · 4.2k assets checked · domain, subdomain, ipv4
CVE
CVE-2025-2473
6.9
CVSSmedium
Exploitable remotely over the internet · no authentication required.
Description
A vulnerability was found in PHPGurukul Company Visitor Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /index.php of the component Sign In. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
company visitor management system
Updated Nov 7, 2026View on NVD →
S4E scanner
CVE history: company visitor management system
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →