PHPGurukul Complaint Management System 2.0 contains a SQL Injection vulnerability in the subcategory.php file via the subcategory and category parameters. This flaw allows an unauthenticated attacker to inject malicious SQL commands, potentially leading to unauthorized access to limited data. The vulnerability has a CVSS score of 6.5, indicating a medium severity risk.