CVE-2026-0803

A vulnerability was found in PHPGurukul Online Course Registration System up to 3.1. This affects an unknown part of the file /enroll.php. The manipulation of the argument studentregno/Pincode/session/department/level/course/sem results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.

• CWE-74
• CWE-89
• CWE-89

• https://note-hxlab.wetolink.com/share/qX132pk8WofkExploit, Third Party Advisory
• https://phpgurukul.com/Product
• https://vuldb.com/?ctiid.340255Permissions Required, VDB Entry
• https://vuldb.com/?id.340255Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.733344Third Party Advisory, VDB Entry

Published

Jan 9, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-0796ALGO 8180 IP Audio Alerter Web UI Command Injection Remote C…8.8
• CVE-2026-0797GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code…8.8
• CVE-2026-0798Gitea may send release notification emails for private repos…3.5
• CVE-2026-0799In BPF instructions that load/store a value from/to a scratc…8.7
• CVE-2026-0800The User Submitted Posts – Enable Users to Submit Posts from…7.2
• CVE-2026-0802An ACAP configuration file lacked sufficient input validatio…7.3
• CVE-2026-0804An ACAP configuration file lacked sufficient input validatio…7.3
• CVE-2026-0805An input neutralization vulnerability in the Backup Configur…8.8
• CVE-2026-0806The WP-ClanWars plugin for WordPress is vulnerable to SQL In…4.9
• CVE-2026-0807The Frontis Blocks plugin for WordPress is vulnerable to Ser…7.2
• CVE-2026-0808The Spin Wheel plugin for WordPress is vulnerable to client-…5.3
• CVE-2026-0809Use of a custom token encoding algorithm in Streamsoft Prest…6.3