A vulnerability has been found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/manage-nurse.php. The manipulation of the argument profilepic leads to path traversal: '../filedir'.
This vulnerability was named CVE-2025-1588. The attack can be initiated remotely. Furthermore, there is an exploit available.
The initial researcher advisory mentions contradicting vulnerability classes.