This vulnerability in PHPGurukul Online Course Registration 3.1 involves SQL injection via the 'regno' argument processed by /admin/check_availability.php. An attacker can remotely manipulate this parameter to inject SQL code, potentially affecting the database. The CVSS 4.0 score is 6.9 (medium), reflecting network attack vector, low complexity, no privileges or user interaction required, and low to limited impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is available, and no known exploits are reported in the wild.

Successful exploitation allows remote attackers to perform SQL injection attacks, which may lead to unauthorized access or modification of database information. The impact is rated medium, with low to limited confidentiality, integrity, and availability impacts as per the CVSS vector. There is no indication of widespread exploitation currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected endpoint, applying web application firewalls with SQL injection detection, and monitoring for suspicious activity related to the 'regno' parameter. Avoid exposing the vulnerable version publicly if possible.