CVE-2026-90844

EUVD-2026-78230
A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of the file /dets/index.php of the component Login. Performing a manipulation of the argument email results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulDBCNA
7.3 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
phpgurukuldaily_expense_tracker_system
1.1
CNA
Common Weakness Enumeration
References
https://github.com/usernamevnq/CVEs/issues/4
https://phpgurukul.com/
https://vuldb.com/cve/CVE-2026-90844
https://vuldb.com/submit/925668
https://vuldb.com/vuln/403396
https://vuldb.com/vuln/403396/cti