CVE-2026-90846 | PHPGurukul Daily Expense Tracker System 1.1 forgot-password.php email/contactno sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is an unknown function of the file /dets/forgot-password.php. The manipulation of the argument email/contactno leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-90846. The attack is possible to be carried out remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More