CVE-2025-57119

The vulnerability affects the Login function in the adminlogin.php component and is classified as CWE-250 (Execution with Unnecessary Privileges). An attacker can exploit this component to gain access with administrator privileges without possessing valid credentials. The attack vector is network-based, and the attack requires no special privileges on the attacker's side or victim interaction.

Successful exploitation of the vulnerability allows the attacker to take over full administrator privileges in the application, which can lead to unauthorized reading, modification and deletion of data (complete compromise of system confidentiality, integrity and availability).

Patches available from the vendor should be applied in accordance with the references. As a temporary measure, it is recommended to restrict access to the administration panel (adminlogin.php) exclusively to trusted IP addresses through firewall configuration or web server rules.

Phpgurukul Online Library Management System version 3.0