CVE-2026-5814
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
A security vulnerability has been detected in PHPGurukul Online Course Registration 3.1 in the file /admin/check_availability.php. Manipulation of the regno argument leads to SQL injection. The attack can be initiated remotely and the exploit is publicly available.
Risk Assessment
An attacker can remotely modify or read database data, posing a serious threat.
Recommendation
Update the course registration system or apply a security patch.
Other vulnerabilities in PHPGurukul Online Course Registration
See all- CVE-2026-5813High
PHPGurukul Online Course Registration 3.1 has a SQL injection vulnerability in /check_availability.php via the cid argument. The attack can be launched remotely and the exploit is publicly available.
- CVE-2025-50485High
The vulnerability in the /crm/change-password.php script of PHPGurukul Online Course Registration v3.1 stems from improper session invalidation after password change. This allows an attacker to hijack the user's session and gain unauthorized access to the account.
Original NVD description (English source)
A security vulnerability has been detected in PHPGurukul Online Course Registration 3.1. This issue affects some unknown processing of the file /admin/check_availability.php. The manipulation of the argument regno leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.