This vulnerability in PHPGurukul User Registration & Login and User Management System 3.3 involves SQL injection via the ID parameter in the /admin/yesterday-reg-users.php file. An attacker with low privileges can remotely manipulate this parameter to inject SQL commands, potentially compromising the database. The CVSS 4.0 base score is 5.3 (medium severity), reflecting network attack vector, low attack complexity, no user interaction, and limited confidentiality, integrity, and availability impacts. No official fix or patch is currently documented.

Successful exploitation could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access or modification. The impact is limited to the confidentiality, integrity, and availability of the affected system's data to a low degree. The vulnerability requires low privileges but no user interaction, making remote exploitation feasible. However, no known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected administrative interface and validate or sanitize input parameters to mitigate SQL injection risks. Monitor for updates from the vendor or trusted security sources regarding patches or official mitigations.