Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-5813: PHPGurukul Online Course Registration 3.1 SQL Injection Risk: Remote Attack Possible

CVE-2026-5813 · published 7 months ago

Summary

The PHPGurukul Online Course Registration system is vulnerable to a remote SQL injection attack. This means that hackers could potentially inject malicious code into the system and access sensitive data or disrupt the website. Users should update or patch their system to prevent exploitation.

Original advisory text

A weakness has been identified in PHPGurukul Online Course Registration 3.1. This vulnerability affects unknown code of the file /check_availability.php. Executing a manipulation of the argument cid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.

References

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

5.5 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-74Injection

CWE-89SQL Injection

Timeline

Published8 Apr 2026

Updated4 Nov 2026

First seen8 Apr 2026

Sources

CVE-2026-5813 · NVD

Track software like this

Free during beta