CVE-2026-5813
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
PHPGurukul Online Course Registration 3.1 has a SQL injection vulnerability in /check_availability.php via the cid argument. The attack can be launched remotely and the exploit is publicly available.
Risk Assessment
The risk is remote SQL injection, potentially allowing an attacker to access the database and steal data.
Recommendation
Immediately validate and sanitize input for the cid argument, and consider upgrading or replacing the system.
Other vulnerabilities in PHPGurukul Online Course Registration
See all- CVE-2026-5814High
A security vulnerability has been detected in PHPGurukul Online Course Registration 3.1 in the file /admin/check_availability.php. Manipulation of the regno argument leads to SQL injection. The attack can be initiated remotely and the exploit is publicly available.
- CVE-2025-50485High
The vulnerability in the /crm/change-password.php script of PHPGurukul Online Course Registration v3.1 stems from improper session invalidation after password change. This allows an attacker to hijack the user's session and gain unauthorized access to the account.
Original NVD description (English source)
A weakness has been identified in PHPGurukul Online Course Registration 3.1. This vulnerability affects unknown code of the file /check_availability.php. Executing a manipulation of the argument cid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.