Improper Access Control in PHPGurukul HMS 3.0 (ID in checklogin.php)
CVE-2026-90851 Published on September 15, 2026
PHPGurukul Hostel Management System checklogin.php access control
A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Timeline
Advisory disclosed
VulDB entry created
VulDB entry last update
Weakness Types
What is an Authorization Vulnerability?
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVE-2026-90851 has been classified to as an Authorization vulnerability or weakness.
Incorrect Privilege Assignment
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
Products Associated with CVE-2026-90851
Want to know whenever a new CVE is published for PHPGurukul Hostel Management System? stack.watch will email you.