CVE-2025-2050: PHPGurukul User Registration & Login and User Management System login.php sql injection
A vulnerability classified as critical was found in PHPGurukul User Registration & Login and User Management System 3.3. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2050?
CVE-2025-2050 is classified as a critical vulnerability due to its potential for SQL injection.
How does CVE-2025-2050 affect the PHPGurukul User Registration & Login and User Management System?
CVE-2025-2050 affects the file /login.php by allowing manipulation of the email argument, leading to SQL injection vulnerabilities.
What is the impact of SQL injection in CVE-2025-2050?
The SQL injection resulting from CVE-2025-2050 allows attackers to execute arbitrary SQL queries on the database, potentially compromising sensitive data.
How can I mitigate the risks associated with CVE-2025-2050?
To mitigate CVE-2025-2050, validate and sanitize user inputs in the /login.php file and implement prepared statements for database queries.
Is there a patch available for CVE-2025-2050?
As of now, there is no official patch mentioned for CVE-2025-2050, so manual code review and remediation are necessary.