Security Advisory

CVE-2026-90841

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-14 23:30:11
Last updated 2026-09-15 14:38:44
Assigner VulDB
CVSS score 7.5
State PUBLISHED

Description

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.