phpgurukul BDMS 1.0 improper auth via Dashboard.php constructor
CVE-2026-90840 Published on September 14, 2026
PHPGurukul Blood Donor Management System Admin Controllers Dashboard.php __construct improper authentication
A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0. Affected is the function __construct of the file /application/controllers/admin/Dashboard.php of the component Admin Controllers. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit is publicly available and might be used.
Timeline
Advisory disclosed
VulDB entry created
VulDB entry last update
Weakness Type
What is an authentification Vulnerability?
When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.
CVE-2026-90840 has been classified to as an authentification vulnerability or weakness.
Products Associated with CVE-2026-90840
Want to know whenever a new CVE is published for PHPGurukul Blood Donor Management System? stack.watch will email you.