PHPGurukul User Registration and Login SQL Injection Vulnerability in Change Password Feature

A SQL injection vulnerability has been identified in the change-password.php file of PHPGurukul User Registration & Login and User Management System version 3.3. This vulnerability allows remote attackers to execute arbitrary code by manipulating the currentpassword POST request parameter.

Impact

Exploitation of this vulnerability allows for SQL injection, which could be used to execute arbitrary SQL commands. Depending on the application's database permissions, this could lead to unauthorized data access or modification, and in some cases, executing arbitrary code on the server.