PT-2025-30752 · Phpgurukul · Phpgurukul User Management+1

Anhtrankma · Published 2025-07-25 · Updated 2025-07-25 · CVE-2025-8156

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PHPGurukul User Registration & Login and User Management version 3.3

Description A critical issue exists in PHPGurukul User Registration & Login and User Management. The vulnerability is due to SQL injection in the /admin/lastsevendays-reg-users.php file, specifically through manipulation of the ID argument. This allows for remote exploitation. The exploit has been publicly disclosed.

Recommendations Versions prior to 3.3 should be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-8156

Affected Products

Phpgurukul User Management

Phpgurukul User Registration & Login

References · 9

• 🔥 https://github.com/secfake/mycve/issues/1 · Exploit
• https://osv.dev/vulnerability/CVE-2025-8156 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8156 · Security Note
• https://phpgurukul.com · Note
• https://vuldb.com/?id.317570 · Note
• https://vuldb.com/?ctiid.317570 · Note
• https://vuldb.com/?submit.620586 · Note
• https://twitter.com/marcin_brz81183/status/1948730498148180255 · Twitter Post
• https://twitter.com/CVEnew/status/1948733593930420695 · Twitter Post