CVE-2026-75089
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
A weakness has been identified in PHPGurukul Complaint Management System 1.0, affecting the file user/check_availability.php. Manipulation of the argument email causes SQL injection. Remote exploitation is possible and the exploit has been made public.
Risk Assessment
An attacker can gain unauthorized access to the database, potentially leading to data leakage, modification, or deletion.
Recommendation
Apply patches provided by the vendor or use parameterized queries. Restrict access to check_availability.php.
Other vulnerabilities in PHPGurukul Complaint Management System
See all- CVE-2024-46335Medium
PHPGurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) via the fromdate and todate parameters in between-date-userreport.php. Input is not properly sanitized.
- CVE-2024-44658Medium
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and category parameters in subcategory.php.
- CVE-2024-44655Medium
PHPGurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) via the search parameter in user-search.php. Improperly sanitized input allows injection of malicious script.
- CVE-2024-44654Medium
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php.
Original NVD description (English source)
A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/check_availability.php. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS