PT-2026-3447 · Unknown · Phpgurukul Directory Management System

Nick_1321 · Publicado 2026-01-19 · Atualizado 2026-01-19 · CVE-2026-1160

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PHPGurukul Directory Management System version 1.0

Description A security issue exists in PHPGurukul Directory Management System 1.0 related to the Search component. The issue involves SQL injection, potentially allowing remote attackers to compromise the system. The vulnerability is located in the /index.php file and involves manipulation of the searchdata argument within an unknown function. The exploit for this issue has been publicly disclosed.

Recommendations Apply updates to address the vulnerability in the Search component. As a temporary workaround, restrict access to the /index.php file or the Search functionality until a patch is available.

Exploit

Correção

SQL injection

Special Elements Injection

Enumeração de Fraquezas

CWE-89

CWE-74

Identificadores relacionados

CVE-2026-1160

Produtos afetados

Phpgurukul Directory Management System

Referências · 9

• 🔥 https://github.com/YouSeeYouOneDayDayDe/Nick_1321_vuls/issues/2 · Exploit
• https://vuldb.com/?ctiid.341754 · Nota
• https://vuldb.com/?id.341754 · Nota
• https://osv.dev/vulnerability/CVE-2026-1160 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2013301267880186315 · Publicação no Twitter
• https://vuldb.com/?submit.736333 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-1160 · Nota de Segurança
• https://twitter.com/CVEnew/status/2013277737943736642 · Publicação no Twitter
• https://phpgurukul.com · Nota