CVE-2025-28011: SQL Injection
A SQL Injection was found in loginsystem/change-password.php in PHPGurukul User Registration & Login and User Management System v3.3 allows remote attackers to execute arbitrary code via the currentpassword POST request parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-28011?
CVE-2025-28011 is classified as a high severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2025-28011?
To fix CVE-2025-28011, sanitize and validate user input to prevent SQL injection attacks, and consider updating to a patched version of the PHPGurukul software.
What products are affected by CVE-2025-28011?
CVE-2025-28011 affects the PHPGurukul User Registration & Login and User Management System v3.3.
Can CVE-2025-28011 be exploited remotely?
Yes, CVE-2025-28011 can be exploited remotely, allowing attackers to execute arbitrary code via the currentpassword POST request parameter.
What type of vulnerability is CVE-2025-28011?
CVE-2025-28011 is a SQL Injection vulnerability that poses significant security risks to affected systems.