Vulnerabilities ›

CVE-2026-5814

High

CWE-74 — Weakness Type

                    Published: Apr 9, 2026                      ·  Modified: Apr 15, 2026                      ·  Source: NVD                

CVSS v3

7.3

🔗 NVD Official

📄 Description (English)

A security vulnerability has been detected in PHPGurukul Online Course Registration 3.1. This issue affects some unknown processing of the file /admin/check_availability.php. The manipulation of the argument regno leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

🤖 AI Executive Summary

CVE-2026-5814 is a SQL injection vulnerability in PHPGurukul Online Course Registration 3.1 affecting the /admin/check_availability.php file through the regno parameter. Remote attackers can exploit this publicly disclosed vulnerability without authentication to compromise database integrity and confidentiality.

📄 Description (Arabic)

تم اكتشاف ثغرة حقن SQL في PHPGurukul Online Course Registration الإصدار 3.1 في ملف /admin/check_availability.php حيث يمكن للمهاجمين التلاعب بمعامل regno لتنفيذ استعلامات SQL ضارة. الثغرة معروضة علناً ويمكن استغلالها عن بعد دون الحاجة للمصادقة.

🤖 ملخص تنفيذي (AI)

A SQL injection flaw exists in PHPGurukul Online Course Registration 3.1 in the /admin/check_availability.php file via the regno parameter. This publicly disclosed vulnerability allows remote exploitation and potential unauthorized database access.

🤖 AI Intelligence Analysis Analyzed: May 7, 2026 13:16

🇸🇦 Saudi Arabia Impact Assessment

Saudi Relevance: high

🏢 Affected Saudi Sectors

education government healthcare

🎯 MITRE ATT&CK Techniques

T1190 T1190 T1083

⚖️ Saudi Risk Score (AI)

7.0

/ 10.0

🔧 Remediation Steps (English)

Immediately upgrade PHPGurukul to the latest patched version. Implement input validation and parameterized queries for all user inputs. Apply Web Application Firewall (WAF) rules to block SQL injection patterns. Restrict access to /admin/ directory using IP whitelisting. Conduct security code review of check_availability.php and similar admin functions.

🔧 خطوات المعالجة (العربية)

قم بالترقية الفورية إلى أحدث إصدار معدل من PHPGurukul. طبق التحقق من صحة المدخلات والاستعلامات المعاملية لجميع مدخلات المستخدم. طبق قواعد جدار حماية تطبيقات الويب لحجب أنماط حقن SQL. قيد الوصول إلى دليل /admin/ باستخدام قائمة بيضاء للعناوين. أجرِ مراجعة أمان شاملة للكود.

📋 Regulatory Compliance Mapping

🟢 NCA ECC 2024

3.1.1 3.2.1 3.3.1

🔵 SAMA CSF

ID.RA-1 PR.DS-1 PR.AC-1

🟡 ISO 27001:2022

A.12.2.1 A.13.1.1 A.14.2.1

🔗 References & Sources 5

🔗

https://github.com/f1rstb100d/CVE/issues/21

cna@vuldb.com

🔗

https://phpgurukul.com/

cna@vuldb.com

🔗

https://vuldb.com/submit/787698

cna@vuldb.com

🔗

https://vuldb.com/vuln/356262

cna@vuldb.com

🔗

https://vuldb.com/vuln/356262/cti

cna@vuldb.com

📊 CVSS Score

7.3

/ 10.0 — High

📊 CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack VectorN — None / Network

Attack ComplexityL — Low / Local

Privileges RequiredN — None / Network

User InteractionN — None / Network

ScopeU — Unchanged

ConfidentialityL — Low / Local

IntegrityL — Low / Local

AvailabilityL — Low / Local

📋 Quick Facts

Severity High

CVSS Score7.3

CWECWE-74

EPSS0.04%

Exploit No

Patch ✗ No

Published 2026-04-09

Source Feed nvd

🇸🇦 Saudi Risk Score

7.0

/ 10.0 — Saudi Risk

Priority: HIGH

🏷️ Tags

CWE-74

⚡ Actions

🔗 NVD Official Page ⚡ Exploit-DB Search 🐙 GitHub PoC Search 🎯 MITRE ATT&CK 📊 CVE Details

💬 Comments

Loading comments

CVE-2026-5814

💬 Comments

Introduce Yourself

Sign In Required