This vulnerability affects PHPGurukul Complaint Management System version 1.0. The issue is located in the user/check_availability.php script, where the email parameter is vulnerable to SQL injection due to insufficient input validation or sanitization. An attacker can remotely exploit this flaw without authentication, potentially executing arbitrary SQL commands on the backend database. The vulnerability has a CVSS 4.0 base score of 6.9, indicating a medium severity level. Public exploit code has been released, increasing the risk of exploitation. No official patch or fix has been documented in the provided data.

Successful exploitation of this SQL injection vulnerability could allow an attacker to manipulate database queries, potentially leading to unauthorized data access, data modification, or other database-related impacts. Since the vulnerability is remotely exploitable without authentication, it poses a significant risk to affected installations. However, the CVSS vector indicates low to limited impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing input validation and sanitization on the email parameter in user/check_availability.php to mitigate SQL injection risks. Restricting database permissions and monitoring for suspicious activity may also help reduce risk.