CVE-2026-5813
Published: 08 April 2026
Summary
CVE-2026-5813 is a medium-severity Injection (CWE-74) vulnerability in Phpgurukul (inferred from references). Its CVSS base score is 6.9 (Medium).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 13.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 RA-5 (Vulnerability Monitoring and Scanning) and SI-10 (Information Input Validation).
Deeper analysis
CVE-2026-5813 is a SQL injection vulnerability (CWE-74, CWE-89) in PHPGurukul Online Course Registration version 3.1. The issue affects unknown code within the file /check_availability.php, where manipulation of the 'cid' argument enables SQL injection attacks. Published on 2026-04-08, it carries a CVSS v3.1 base score of 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L), indicating high severity due to its network accessibility and lack of prerequisites.
Remote attackers require no privileges or user interaction to exploit this vulnerability over the network with low complexity. Successful exploitation can result in limited impacts to confidentiality, integrity, and availability, such as unauthorized data access, modification, or denial of service via injected SQL payloads. A public exploit is available, increasing the risk of real-world attacks.
Advisories and further details are documented in references including https://github.com/f1rstb100d/CVE/issues/20, https://vuldb.com/vuln/356261, https://vuldb.com/submit/787686, https://vuldb.com/vuln/356261/cti, and the vendor site https://phpgurukul.com/. No specific patch or mitigation steps are outlined in the CVE description.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-20805
Vulnerability details
A weakness has been identified in PHPGurukul Online Course Registration 3.1. This vulnerability affects unknown code of the file /check_availability.php. Executing a manipulation of the argument cid can lead to sql injection. It is possible to launch the attack remotely.…
more
The exploit has been made available to the public and could be used for attacks.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
SQL injection in publicly accessible PHP web app (/check_availability.php) directly enables remote exploitation of a public-facing application with no auth required.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly prevents SQL injection by validating the 'cid' argument in /check_availability.php before use in database queries.
Requires timely identification, reporting, and correction of the specific SQL injection flaw in the vulnerable PHP application.
Vulnerability scanning detects the SQL injection issue in /check_availability.php and drives its remediation.