A vulnerability described as critical has been identified in PHPGurukul Online Course Registration System up to 3.1. This affects an unknown part of the file /enroll.php. The manipulation of the argument studentregno/Pincode/session/department/level/course/sem results in sql injection.

This vulnerability is cataloged as CVE-2026-0803. The attack may be launched remotely. Furthermore, there is an exploit available.