CVE-2026-90518mediumCWE-266CWE-284

CVE-2026-90518: medium-severity vulnerability in PHPGurukul Bank Locker Management System

PHPGurukul Bank Locker Management System sidebar.php access control

Published · Updated

Follow this CVE+ Monitor Bank Locker Management System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 5.3epss 0.4%
A security flaw has been discovered in PHPGurukul Bank Locker Management System 1.0. This impacts an unknown function of the file sidebar.php. The manipulation of the argument UserType results in improper access controls. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
PHPGurukul · Bank Locker Management System
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — PHPGurukul Bank Locker Management System

In the same product, most dangerous first.

CVE-2023-0562HIGHPHPGurukul Bank Locker Management System Login index.php sql injectionEPSS 44.3%CVE-2023-0563LOWPHPGurukul Bank Locker Management System Assign Locker add-locker-form.php cross site scriptingEPSS 37.6%CVE-2023-1964HIGHPHPGurukul Bank Locker Management System Password Reset recovery.php sql injectionEPSS 1.0%CVE-2023-1963MEDIUMPHPGurukul Bank Locker Management System Search index.php sql injectionEPSS 0.7%CVE-2026-90517MEDIUMPHPGurukul Bank Locker Management System view-assign-locker.php authorizationEPSS 0.6%CVE-2025-2684MEDIUMPHPGurukul Bank Locker Management System search-report-details.php sql injectionEPSS 0.5%