PT-2025-11191

Name of the Vulnerable Software and Affected Versions: PHPGurukul User Registration & Login and User Management System version 3.3 Description: A SQL Injection issue was discovered in the loginsystem/change-password.php file, allowing remote attackers to execute arbitrary code via the...

CVE-2025-28011: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection was found in loginsystem/change-password.php in PHPGurukul User Registration & Login and User Management System v3.3 allows remote attackers to execute arbitrary code via the currentpassword POST request parameter...