Is there a public PoC exploit available for CVE-2025-8158?

Yes, a public proof-of-concept exploit is available for CVE-2025-8158. Prioritise patching immediately. EPSS: 0.1%.

PHPGurukul Login and User Management System CVE-2025-8158

Q: What is the CVSS score of CVE-2025-8158?

CVE-2025-8158 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

LOW

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CWE-74)

2025-07-25 cna@vuldb.com

PHP SQLi User Registration Login And User Management System

2.1

CVSS 4.0

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Apr 29, 2026 - 01:48 vuln.today

DescriptionNVD

A vulnerability was found in PHPGurukul Login and User Management System 3.3. It has been declared as critical. This vulnerability affects unknown code of the file /admin/yesterday-reg-users.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

SQL injection in PHPGurukul Login and User Management System 3.3 allows authenticated remote attackers to execute arbitrary SQL queries via the ID parameter in /admin/yesterday-reg-users.php. The vulnerability has a publicly available exploit but poses limited real-world risk due to authentication requirements and low CVSS impact scores (2.1/10). Exploitation is marked probable (E:P in CVSS4.0) but the EPSS score of 0.06% suggests minimal actual exploitation despite public disclosure.

Technical ContextAI

The vulnerability stems from improper input validation on the ID parameter passed to /admin/yesterday-reg-users.php, classified as CWE-74 (Improper Neutralization of Special Elements in Output). The affected product is a PHP-based user registration and login management system (CPE: cpe:2.3:a:phpgurukul:user_registration_&_login_and_user_management_system:3.3). The SQL injection flaw allows direct query manipulation when user input is concatenated into SQL statements without sanitization or parameterized queries. This is a classic server-side SQL injection vulnerability in a web application context.

RemediationAI

Upgrade PHPGurukul Login and User Management System to a patched version released after 3.3. If an official patch is unavailable, immediately implement the following compensating controls: (1) restrict access to /admin/ directories to trusted IP addresses only via firewall or web server configuration-this is critical since the vulnerable endpoint requires authenticated admin access; (2) implement Web Application Firewall (WAF) rules to detect and block SQL injection patterns in the ID parameter, particularly SQL keywords and special characters (semicolon, quote, comment markers); (3) apply principle of least privilege by ensuring the database user account running PHPGurukul has minimal permissions (SELECT only on necessary tables, no ALTER/DROP); (4) enable database query logging and set up alerts for unusual SQL syntax. Consult phpgurukul.com for official patch availability and deployment guidance. Verify patching with security testing after implementation.

CVE-2025-8158 vulnerability details – vuln.today

Back