This vulnerability affects PHPGurukul Complaint Management System 1.0. It arises from improper input validation of the email parameter in the user/check_availability.php script, enabling SQL injection attacks. The flaw allows remote attackers to manipulate SQL queries, potentially compromising the database. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity. Exploit code has been publicly disclosed, but no official fix or patch is currently documented.

Successful exploitation could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access or modification. The vulnerability is remotely exploitable without authentication and requires no user interaction. However, the CVSS vector indicates low to limited impact on confidentiality, integrity, and availability.

No official patch or remediation has been confirmed by the vendor. Users should monitor the vendor's advisory channels for updates. In the meantime, applying input validation and sanitization on the email parameter or restricting access to the vulnerable script may reduce risk. Since exploit code is publicly available, caution is advised.