CVE-2025-7542: PHPGurukul User Registration & Login and User Management System user-profile.php sql injection
A vulnerability was found in PHPGurukul User Registration & Login and User Management System 3.3 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/user-profile.php. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7542?
CVE-2025-7542 is classified as a critical vulnerability due to its potential for SQL injection.
How does CVE-2025-7542 allow SQL injection?
CVE-2025-7542 allows SQL injection through manipulation of the argument uid in the file /admin/user-profile.php.
Is CVE-2025-7542 present in all versions of PHPGurukul User Registration & Login and User Management System?
CVE-2025-7542 specifically affects version 3.3 of PHPGurukul User Registration & Login and User Management System.
What are the potential impacts of exploiting CVE-2025-7542?
Exploiting CVE-2025-7542 could allow attackers to execute arbitrary SQL queries on the database.
How can I fix CVE-2025-7542?
To fix CVE-2025-7542, update PHPGurukul User Registration & Login and User Management System to the latest secure version that addresses the vulnerability.