CVE-2026-0803: Phpgurukul Online Course Registration System

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability was found in PHPGurukul Online Course Registration System up to 3.1. This affects an unknown part of the file /enroll.php. The manipulation of the argument studentregno/Pincode/session/department/level/course/sem results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.

Affected products

• Phpgurukul Online Course Registration System: up to and including 3.1

Published 2026-01-09. Last modified 2026-06-17.