PHPGurukul Complaint Management System 2.0 contains a SQL Injection vulnerability in the reset-password.php script via the email and mobileno parameters. This flaw allows an unauthenticated attacker to inject malicious SQL code, potentially leading to unauthorized data access or manipulation. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level. No patch or remediation information is currently available.