SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-90844

HIGH · CVSS 7.3 EPSS 0.26% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-15 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The PHPGurukul Daily Expense Tracker System 1.1 is vulnerable to SQL injection through the email argument in the /dets/index.php file, allowing remote attackers to manipulate database queries. This high-severity vulnerability poses a significant risk of unauthorized data access or manipulation. Organizations using this system should prioritize immediate remediation to mitigate potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-90844
Severity
HIGH
CVSS
7.3
EPSS
0.26%

Original NVD Description

A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of the file /dets/index.php of the component Login. Performing a manipulation of the argument email results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.