CVE-2025-28011: Phpgurukul User Registration & Login And User Management System

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

A SQL Injection was found in loginsystem/change-password.php in PHPGurukul User Registration & Login and User Management System v3.3 allows remote attackers to execute arbitrary code via the currentpassword POST request parameter.

Affected products

• Phpgurukul User Registration & Login And User Management System: version 3.3 only

Published 2025-03-13. Last modified 2026-06-17.