HIGHCVE-2026-5814CVSS 7.3

CVE-2026-5814: SQL Injection in PHPGurukul Online Course Registration

Platform

php

Component

phpgurukul-online-course-registration

Fixed in

3.1.1

AI Confidence: highNVDEPSS 0.0%Reviewed: May 2026

CVE-2026-5814 describes a SQL Injection vulnerability affecting PHPGurukul Online Course Registration versions 3.1 through 3.1. This flaw allows attackers to manipulate SQL queries through the 'regno' parameter within the /admin/check_availability.php file. Successful exploitation could result in unauthorized data access or modification. A patch is expected to address this issue.

Impact and Attack Scenarios

The SQL Injection vulnerability in PHPGurukul Online Course Registration allows an attacker to inject arbitrary SQL code into database queries. This can lead to a wide range of malicious activities, including unauthorized access to sensitive data such as user credentials, course details, and payment information. An attacker could potentially modify or delete data, leading to data integrity issues and disruption of service. The remote nature of the vulnerability means an attacker does not need to be on the same network as the server to exploit it. Given the potential for data exfiltration and manipulation, the blast radius of this vulnerability is significant, especially if the application handles sensitive user data or financial transactions.

Exploitation Context

This vulnerability has been publicly disclosed, increasing the likelihood of exploitation. The availability of public information makes it easier for attackers to identify and exploit the flaw. The exploit is considered relatively straightforward, requiring only manipulation of the 'regno' parameter. Currently, there is no indication of active exploitation campaigns targeting this specific vulnerability, but the public disclosure warrants immediate attention and mitigation.

Threat Intelligence

Exploit Status

Proof of ConceptUnknown
CISA KEVNO
Internet ExposureHigh
Reports1 threat report

EPSS

0.04% (12% percentile)

CISA SSVC

Exploitationpoc
Automatableyes
Technical Impactpartial

CVSS Vector

THREAT INTELLIGENCE· CVSS 3.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R7.3HIGHAttack VectorNetworkHow the attacker reaches the targetAttack ComplexityLowConditions required to exploitPrivileges RequiredNoneAuthentication level needed to attackUser InteractionNoneWhether a victim must take actionScopeUnchangedImpact beyond the vulnerable componentConfidentialityLowRisk of sensitive data exposureIntegrityLowRisk of unauthorized data modificationAvailabilityLowRisk of service disruptionnextguardhq.com · CVSS v3.1 Base Score
What do these metrics mean?
Attack Vector
Network — remotely exploitable over the internet. No physical or local access required. Widest attack surface.
Attack Complexity
Low — no special conditions required. Attacker can exploit reliably without depending on rare configurations or timing.
Privileges Required
None — unauthenticated. No login or credentials needed to exploit.
User Interaction
None — attack is automatic and silent. Victim does nothing: no click, no file open.
Scope
Unchanged — impact is limited to the vulnerable component itself.
Confidentiality
Low — partial or indirect data access. Attacker gains limited information.
Integrity
Low — attacker can modify some data with limited scope or impact.
Availability
Low — partial or intermittent denial of service. Attacker can degrade performance.

Affected Software

Componentphpgurukul-online-course-registration
VendorPHPGurukul
Affected rangeFixed in
3.1 – 3.13.1.1

Weakness Classification (CWE)

Timeline

  1. Reserved
  2. Published
  3. Modified
  4. EPSS updated
Unpatched — 46 days since disclosure

Mitigation and Workarounds

The primary mitigation for CVE-2026-5814 is to upgrade to a patched version of PHPGurukul Online Course Registration as soon as it becomes available. Until a patch is released, consider implementing temporary workarounds such as input validation and sanitization on the 'regno' parameter in /admin/checkavailability.php. Web Application Firewalls (WAFs) configured to detect and block SQL Injection attempts can also provide a layer of protection. Review and restrict database user permissions to limit the impact of a successful attack. After upgrade, confirm the vulnerability is resolved by attempting a SQL injection payload on the /admin/checkavailability.php endpoint.

How to fix

Update the PHPGurukul Online Course Registration plugin to the latest available version to mitigate the (SQL Injection) vulnerability. Check the vendor's official sources for specific update instructions and security patches. Implement appropriate input validation and escaping to prevent future (SQL Injections).

CVE Security Newsletter

Vulnerability analysis and critical alerts directly to your inbox.

Frequently asked questions

What is CVE-2026-5814 — SQL Injection in PHPGurukul Online Course Registration?

CVE-2026-5814 is a SQL Injection vulnerability in PHPGurukul Online Course Registration versions 3.1–3.1, allowing attackers to manipulate database queries via the 'regno' parameter in /admin/check_availability.php.

Am I affected by CVE-2026-5814 in PHPGurukul Online Course Registration?

If you are using PHPGurukul Online Course Registration version 3.1, you are potentially affected by this vulnerability and should prioritize patching.

How do I fix CVE-2026-5814 in PHPGurukul Online Course Registration?

Upgrade to a patched version of PHPGurukul Online Course Registration as soon as it becomes available. Implement input validation and WAF rules as temporary mitigations.

Is CVE-2026-5814 being actively exploited?

While there's no confirmed active exploitation currently, the public disclosure increases the risk of exploitation. Prompt mitigation is crucial.

Where can I find the official PHPGurukul advisory for CVE-2026-5814?

Refer to the PHPGurukul website or security mailing lists for the official advisory and patch information regarding CVE-2026-5814.

Is your project affected?

Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.