High severity7.3NVD Advisory· Published Sep 15, 2026

CVE-2026-90841

Description

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Phpgurukul/Blood Donor Management Systemllm-fuzzy
Range: 1.0

Patches

Vulnerability mechanics

References

github.com/usernamevnq/CVEs/issues/2nvd
phpgurukul.comnvd
vuldb.com/cve/CVE-2026-90841nvd
vuldb.com/submit/925627nvd
vuldb.com/vuln/403393nvd
vuldb.com/vuln/403393/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000