<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: user management system</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-10098: A security flaw has been discovered in PHPGurukul User Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-10098.html</link><guid>https://patchthecve.com/cve/CVE-2025-10098.html</guid><pubDate>Wed, 17 Jun 2026 08:27:41 +0000</pubDate><description>MEDIUM 6.3: A security flaw has been discovered in PHPGurukul User Management System 1.0. Affected is an unknown function of the file /admin/edit-user-profile.php. The manipulation of the argument uid results in sql injection. The attack may be performed from remote. The exploit has been released to the public </description></item><item><title>CVE-2025-9756: A vulnerability was found in PHPGurukul User Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-9756.html</link><guid>https://patchthecve.com/cve/CVE-2025-9756.html</guid><pubDate>Wed, 17 Jun 2026 10:09:41 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in PHPGurukul User Management System 1.0. This impacts an unknown function of the file /admin/change-emailid.php. The manipulation of the argument uid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.</description></item><item><title>CVE-2025-9302: A vulnerability was identified in PHPGurukul User Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-9302.html</link><guid>https://patchthecve.com/cve/CVE-2025-9302.html</guid><pubDate>Wed, 17 Jun 2026 10:08:42 +0000</pubDate><description>HIGH 7.3: A vulnerability was identified in PHPGurukul User Management System 1.0. This vulnerability affects unknown code of the file /signup.php. Such manipulation of the argument emailid leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.</description></item></channel></rss>