PT-2026-30415 · Phpgurukul · User Registration & Login/User Management System

Published 2026-04-05 · Updated 2026-04-05 · CVE-2026-5543

Mitre

CVSS v3.1

6.3

Medium

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A vulnerability was identified in PHPGurukul User Registration & Login and User Management System 3.3. The affected element is an unknown function of the file /admin/yesterday-reg-users.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-5543

Affected Products

User Registration & Login/User Management System

References · 7

• 🔥 https://github.com/f1rstb100d/CVE/issues/4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5543 · Security Note
• https://phpgurukul.com · Note
• https://twitter.com/cyberbivash/status/2040667242111672423 · Twitter Post
• https://vuldb.com/vuln/355296 · Note
• https://vuldb.com/vuln/355296/cti · Note
• https://vuldb.com/submit/782246 · Note