CVE-2025-2093 | PHPGurukul Online Library Management System 3.0 /change-password.php email/phone number password recovery

A vulnerability was found in PHPGurukul Online Library Management System 3.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /change-password.php. The manipulation of the argument email/phone number leads to weak password recovery.

This vulnerability is known as CVE-2025-2093. The attack can be launched remotely. Furthermore, there is an exploit available.