High severity · published Aug 18, 2026
CVE-2026-75089
PHPGurukul Complaint Management System check_availability.php sql injection
7.3
CVSS
0.4%
EPSS
No
On KEV
Description
A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/check_availability.php. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CM
Complaint Management System · PHPGurukul
1.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-75089
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-75089
github.com
https://github.com/niaoniaollll/cve/issues/3
phpgurukul.com
https://phpgurukul.com/
vuldb.com
https://vuldb.com/cve/CVE-2026-75089
vuldb.com
https://vuldb.com/submit/876776
vuldb.com
https://vuldb.com/vuln/391316
vuldb.com
https://vuldb.com/vuln/391316/cti
More from Complaint Management System
9.8
CVE-2025-4761
PHPGurukul Complaint Management System admin-profile.php sql injection
9.8
CVE-2024-13004
PHPGurukul Complaint Management System category.php sql injection
9.8
CVE-2024-12977
PHPGurukul Complaint Management System state.php sql injection
9.8
CVE-2024-12230
A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 1.0
9.8
CVE-2024-12229
A vulnerability classified as critical was found in PHPGurukul Complaint Management System 1.0