CVE-2025-28011

A SQL Injection vulnerability exists in the loginsystem/change-password.php component of the PHPGurukul User Registration & Login and User Management System v3.3 . Remote attackers can exploit the currentpassword POST request parameter to execute arbitrary code. A proof-of-concept (PoC) for this ...