{"vulnerability": "cve-2025-3829", "sightings": [{"uuid": "5d0cadcd-e799-49f0-9d1b-3a7251b32144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3829", "type": "published-proof-of-concept", "source": "Telegram/JN8HqQ86a35ZM6FgS3ptfJBd5nnj23m5yNfl-2Q2DSMqn8U", "content": "", "creation_timestamp": "2025-04-20T19:30:22.000000Z"}, {"uuid": "2d9f5f69-1492-4262-9fe8-9a5836763c75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3829", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnbctydfxd2g", "content": "", "creation_timestamp": "2025-04-20T18:48:53.720262Z"}, {"uuid": "82df6f8a-171d-4b66-a1d3-48bbd0eff699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3829", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnbfs5aukz42", "content": "", "creation_timestamp": "2025-04-20T19:41:43.350487Z"}, {"uuid": "339096e0-2e20-4ae9-af50-ac3999925ff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3829", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12618", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3829\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/sales-reports-detail.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-04-20T16:00:07.222Z\n\ud83d\udccf Modified: 2025-04-20T16:00:07.222Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.305736\n2. https://vuldb.com/?ctiid.305736\n3. https://vuldb.com/?submit.555930\n4. https://github.com/NuoNuo-L/cve/issues/3\n5. https://phpgurukul.com/", "creation_timestamp": "2025-04-20T17:02:19.000000Z"}, {"uuid": "5248111e-2551-4db6-a08d-4f389340cc11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3829", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114366860108376362", "content": "", "creation_timestamp": "2025-04-19T21:56:35.241066Z"}, {"uuid": "70e1067b-1346-45f9-a8ce-d3cdd2145769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3829", "type": "seen", "source": "https://t.me/cvedetector/23413", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3829 - PHPGurukul Men Salon Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3829 \nPublished : April 20, 2025, 4:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/sales-reports-detail.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-20T19:34:26.000000Z"}]}