CVE-2025-28011

creationtimestamp| type| source ---|---|--- 2025-03-13 16:45:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7441 2025-03-13 19:48:15+00:00| seen| https://t.me/cvedetector/20239...

CVE-2025-28011

A SQL Injection was found in loginsystem/change-password.php in PHPGurukul User Registration & Login and User Management System v3.3 allows remote attackers to execute arbitrary code via the currentpassword POST request parameter...