PT-2026-3447 · Unknown · Phpgurukul Directory Management System

Nick_1321 · Published 2026-01-19 · Updated 2026-01-19 · CVE-2026-1160

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PHPGurukul Directory Management System version 1.0

Description A security issue exists in PHPGurukul Directory Management System 1.0 related to the Search component. The issue involves SQL injection, potentially allowing remote attackers to compromise the system. The vulnerability is located in the /index.php file and involves manipulation of the searchdata argument within an unknown function. The exploit for this issue has been publicly disclosed.

Recommendations Apply updates to address the vulnerability in the Search component. As a temporary workaround, restrict access to the /index.php file or the Search functionality until a patch is available.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-1160

Affected Products

Phpgurukul Directory Management System

References · 9

• 🔥 https://github.com/YouSeeYouOneDayDayDe/Nick_1321_vuls/issues/2 · Exploit
• https://osv.dev/vulnerability/CVE-2026-1160 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-1160 · Security Note
• https://vuldb.com/?ctiid.341754 · Note
• https://vuldb.com/?id.341754 · Note
• https://twitter.com/VulmonFeeds/status/2013301267880186315 · Twitter Post
• https://vuldb.com/?submit.736333 · Note
• https://twitter.com/CVEnew/status/2013277737943736642 · Twitter Post
• https://phpgurukul.com · Note