CVE-2026-6193: medium-severity vulnerability in PHPGurukul Daily Expense Tracking System
PHPGurukul Daily Expense Tracking System register.php sql injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 6.9epss 0.3%
A security flaw has been discovered in PHPGurukul Daily Expense Tracking System 1.1. Affected is an unknown function of the file /register.php. The manipulation of the argument email results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
PHPGurukul · Daily Expense Tracking Systempublic PoCs found — 1
cve_referencegithub.com/f1rstb100d/CVE/issues/47unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.