CVE-2026-6193

HighCVSS 7.3/10Last modified Oct 26, 2026

Description

A security flaw has been discovered in PHPGurukul Daily Expense Tracking System 1.1. Affected is an unknown function of the file /register.php. The manipulation of the argument email results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74CWE-89

Affected software

VendorProductVersions
PHPGurukulDaily Expense Tracking System1.1

References

Timeline

Published
Apr 13, 2026
Last modified
Oct 26, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-619307.8Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-619317.8Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.CVE-2026-619327.8Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privilegeCVE-2026-619335.5Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.CVE-2026-619347.8Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.CVE-2026-619365.5Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.CVE-2026-619377.8Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.CVE-2026-619387.0Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-619397.0Use after free in Winlogon allows an authorized attacker to elevate privileges locally.CVE-2026-61948.8A weakness has been identified in Totolink A3002MU B20211125.1046. Affected by this vulnerability is the function sub_410188 of the file /boCVE-2026-619437.5Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions.CVE-2026-619447.1Unauthenticated Cross Site Scripting (XSS) in Bookly <= 27.7 versions.
CVE-2026-6193: High severity, CVSS 7.3 | Vulnix