CVE-2026-90845

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

CVE-2026-90845

CVE-2026-90845 is a cross-site scripting (XSS) flaw in PHPGurukul Daily Expense Tracker System 1.1 , specifically in the file /dets/includes/sidebar.php . Manipulating the FullName argument allows a remote attacker with low privileges to execute script in a victim's browser, requiring user intera...

CVE-2026-90845 PHPGurukul Daily Expense Tracker System sidebar.php cross site scripting

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

EUVD-2026-78231

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

CVE-2026-90845 PHPGurukul Daily Expense Tracker System sidebar.php cross site scripting

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

PT-2026-91770

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

CVE-2026-90845: Improper Neutralization of Input During Web Page Generation

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

CVE-2026-90518

A security flaw has been discovered in PHPGurukul Bank Locker Management System 1.0. This impacts an unknown function of the file sidebar.php. The manipulation of the argument UserType results in improper access controls. The attack may be launched remotely. The exploit has been released to the...

CVE-2026-90518 PHPGurukul Bank Locker Management System sidebar.php access control

A security flaw has been discovered in PHPGurukul Bank Locker Management System 1.0. This impacts an unknown function of the file sidebar.php. The manipulation of the argument UserType results in improper access controls. The attack may be launched remotely. The exploit has been released to the...

CVE-2026-90518 PHPGurukul Bank Locker Management System sidebar.php access control

A security flaw has been discovered in PHPGurukul Bank Locker Management System 1.0. This impacts an unknown function of the file sidebar.php. The manipulation of the argument UserType results in improper access controls. The attack may be launched remotely. The exploit has been released to the...

CVE-2026-90518

A vulnerability in PHPGurukul Bank Locker Management System 1.0 allows remote attackers with low privileges to manipulate the UserType argument in sidebar.php , leading to improper access controls . The flaw permits unauthorized access to sensitive functions of the system, resulting in low impact...

EUVD-2026-77006

A security flaw has been discovered in PHPGurukul Bank Locker Management System 1.0. This impacts an unknown function of the file sidebar.php. The manipulation of the argument UserType results in improper access controls. The attack may be launched remotely. The exploit has been released to the...

PT-2026-90852

Name of the Vulnerable Software and Affected Versions PHPGurukul Bank Locker Management System version 1.0 Description An improper access control issue exists in the sidebar.php file. A remote attacker can manipulate the UserType argument to bypass security restrictions and gain unauthorized...

CVE-2026-90518: Improper Access Control

A security flaw has been discovered in PHPGurukul Bank Locker Management System 1.0. This impacts an unknown function of the file sidebar.php. The manipulation of the argument UserType results in improper access controls. The attack may be launched remotely. The exploit has been released to the...

PT-2022-20328

Name of the Vulnerable Software and Affected Versions elitecms version 1.01 Description The issue allows for SQL Injection via the "/admin/add sidebar.php" API endpoint. Recommendations For elitecms version 1.01, update to a version that fixes this issue, as using the current version may pose a...

PT-2022-20330

Name of the Vulnerable Software and Affected Versions elitecms version 1.01 Description The issue allows for SQL Injection via the "/admin/edit sidebar.php" API endpoint. Recommendations For elitecms version 1.01, update to a version that fixes this issue, if available. As a temporary workaround,...

PT-2022-20329

Name of the Vulnerable Software and Affected Versions elitecms version 1.01 Description The issue is related to SQL Injection. It can be exploited via the "admin/edit sidebar.php" endpoint with parameters such as page and sidebar. Recommendations For elitecms version 1.01, as a temporary...

PT-2019-8880

Name of the Vulnerable Software and Affected Versions Elite CMS Pro version 2.01 Description An issue was discovered in the software, where the page parameter in the /admin/add sidebar.php API endpoint is vulnerable to SQL injection. Recommendations For Elite CMS Pro version 2.01, consider...

CVE-2008-0433: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in theme/phpAutoVideo/LightTwoOh/sidebar.php in Agares phpAutoVideo 2.21 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter, a different vector than CVE-2007-6614...

CVE-2007-4818: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the docroot parameter to 1 addons/plugin.php, 2 addons/sidebar.php, 3 mail/index.php, or 4 mail/mailbox.php in modules/...