This vulnerability affects PHPGurukul User Registration & Login and User Management System version 3.3. It arises from improper handling of the ID parameter in a function located in /admin/yesterday-reg-users.php, allowing an attacker to perform SQL injection. The vulnerability can be exploited remotely without user interaction, potentially enabling unauthorized database queries or data manipulation. The CVSS 4.0 base score is 5.3, indicating medium severity. No official fix or patch has been disclosed as of the publication date.

Successful exploitation of this SQL injection vulnerability could allow an attacker to execute arbitrary SQL commands on the backend database. This may lead to unauthorized data access, modification, or deletion within the affected system. Since the vulnerability is remotely exploitable without user interaction, it increases the risk of automated attacks. However, the CVSS score and vector indicate limited impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected /admin/yesterday-reg-users.php functionality, implement web application firewall (WAF) rules to detect and block SQL injection attempts targeting the ID parameter, and review application code for proper input validation and parameterized queries.