This vulnerability affects PHPGurukul Online Course Registration 3.1, specifically in the /check_availability.php script. An attacker can manipulate the 'cid' argument to perform SQL injection, potentially allowing unauthorized access or modification of the backend database. The vulnerability is remotely exploitable without requiring privileges or user interaction. The CVSS 4.0 base score is 6.9, indicating medium severity. No official patch or fix has been disclosed, and the product is not a cloud service, so remediation depends on vendor or user action.

Successful exploitation of this SQL injection vulnerability could allow an attacker to execute arbitrary SQL commands on the backend database. This may lead to unauthorized data access, data modification, or other database-related impacts. The vulnerability is exploitable remotely and does not require authentication, increasing its risk. However, the CVSS vector indicates low to limited impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently available, users should consider implementing input validation and parameterized queries as temporary mitigations to prevent SQL injection attacks. Monitoring for unusual database activity and restricting access to the vulnerable script may also help reduce risk until a vendor fix is released.