Phpgurukul · Phpgurukul Online Course Registration System · CVE-2026-0803
**Name of the Vulnerable Software and Affected Versions**
PHPGurukul Online Course Registration System versions up to 3.1
**Description**
A flaw exists in PHPGurukul Online Course Registration System that allows for SQL injection. The issue is located in the `/enroll.php` file. Manipulating the `studentregno`, `Pincode`, `session`, `department`, `level`, `course`, or `sem` arguments can trigger the injection. This attack can be carried out remotely. The exploit for this issue has been publicly released.
**Recommendations**
Versions prior to 3.1 should be updated.