github.comexploitissue tracking
https://github.com/f1rstb100d/CVE/issues/21 CVE-2026-5814
MEDIUM
PHPGurukul Online Course Registration check_availability.php sql injection
Record summary
CVE-2026-5814 has a selected CVSS score of 6.9 (medium).
Description
A security vulnerability has been detected in PHPGurukul Online Course Registration 3.1. This issue affects some unknown processing of the file /admin/check_availability.php. The manipulation of the argument regno leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 9, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Online Course RegistrationBrowse PHPGurukul / Online Course Registration | CVE List | 3.1 | affected |
References
6nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-5814 phpgurukul.comproduct
https://phpgurukul.com/ Submit #787698 | PHPGurukul Online Course Registration 3.1 SQL InjectionThird-party advisory
https://vuldb.com/submit/787698 VDB-356262 | PHPGurukul Online Course Registration check_availability.php sql injectionvdb entryTechnical description
https://vuldb.com/vuln/356262 VDB-356262 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions required
https://vuldb.com/vuln/356262/cti