CVE-2026-6193: PHPGurukul Daily Expense Tracking System register.php sql injection
A security flaw has been discovered in PHPGurukul Daily Expense Tracking System 1.1. Affected is an unknown function of the file /register.php. The manipulation of the argument email results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6193?
CVE-2026-6193 has a high severity rating due to the SQL injection vulnerability that could allow attackers to manipulate database queries.
How do I fix CVE-2026-6193?
To fix CVE-2026-6193, sanitize and validate the input for the email parameter in the register.php file to prevent SQL injection.
Which versions of PHPGurukul Daily Expense Tracking System are affected by CVE-2026-6193?
CVE-2026-6193 affects version 1.1 of the PHPGurukul Daily Expense Tracking System.
What components of PHPGurukul Daily Expense Tracking System are impacted by CVE-2026-6193?
CVE-2026-6193 impacts the /register.php file's processing of the email input, making it vulnerable to SQL injection.
Can CVE-2026-6193 lead to data compromise?
Yes, CVE-2026-6193 can lead to data compromise as it allows unauthorized SQL queries that can expose sensitive information.