CVE-2026-5543

MediumCVSS 6.3

Published: 05/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

SQL Injection vulnerability in PHPGurukul User Registration & Login and User Management System 3.3. An unknown function in the file /admin/yesterday-reg-users.php allows manipulation of the ID argument, leading to SQL injection. Remote attack is possible, exploit is public.

Risk Assessment

An attacker can remotely steal or modify user data in the user management system, potentially compromising data confidentiality and integrity.

Recommendation

Immediately update the system to the latest version or apply a security patch to prevent SQL injection, such as input validation and parameterized queries.

Original NVD description (English source)

A vulnerability was identified in PHPGurukul User Registration & Login and User Management System 3.3. The affected element is an unknown function of the file /admin/yesterday-reg-users.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.