CVE-2026-75089
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A weakness has been identified in PHPGurukul Complaint Management System 1.0, affecting the file user/check_availability.php. Manipulation of the argument email causes SQL injection. Remote exploitation is possible and the exploit has been made public.
Risk Assessment
An attacker can gain unauthorized access to the database, potentially leading to data leakage, modification, or deletion.
Recommendation
Apply patches provided by the vendor or use parameterized queries. Restrict access to check_availability.php.
Original NVD description (English source)
A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/check_availability.php. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.