CVE-2026-0733

A vulnerability was determined in PHPGurukul Online Course Registration System up to 3.1. This impacts an unknown function of the file /onlinecourse/admin/manage-students.php. This manipulation of the argument id/cid causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

• CWE-74
• CWE-89
• CWE-89

• https://note-hxlab.wetolink.com/share/Tma34bofeB2LExploit, Third Party Advisory
• https://note-hxlab.wetolink.com/share/cU33RBoPPAF0Exploit, Third Party Advisory
• https://phpgurukul.com/Product
• https://vuldb.com/?ctiid.340130Permissions Required, VDB Entry
• https://vuldb.com/?id.340130Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.733328Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.733331Third Party Advisory, VDB Entry

Published

Jan 9, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-0727The Accordion and Accordion Slider plugin for WordPress is v…5.4
• CVE-2026-0728A security vulnerability has been detected in code-projects …7.2
• CVE-2026-0729A vulnerability was detected in code-projects Intern Members…7.2
• CVE-2026-0730A flaw has been found in PHPGurukul Staff Leave Management S…4.8
• CVE-2026-0731A vulnerability has been found in TOTOLINK WA1200 5.9c.2914.…7.5
• CVE-2026-0732A vulnerability was found in D-Link DI-8200G 17.12.20A1. Thi…9.8
• CVE-2026-0734The WP Allowed Hosts plugin for WordPress is vulnerable to S…4.4
• CVE-2026-0735The User Language Switch plugin for WordPress is vulnerable …4.4
• CVE-2026-0736The Chatbot for WordPress by Collect.chat plugin for WordPre…6.4
• CVE-2026-0737The WP Shortcodes Plugin - Shortcodes Ultimate plugin for Wo…6.4
• CVE-2026-0738The WP Shortcodes Plugin - Shortcodes Ultimate plugin for Wo…6.4
• CVE-2026-0739The WMF Mobile Redirector plugin for WordPress is vulnerable…4.4