Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-90840

PHPGurukul Blood Donor Management System Admin Controllers Dashboard.php __construct improper authentication

CVSS 4.0 6.9 MEDIUMCVSS 3.1 7.3 HIGHCVSS 3.0 7.3 HIGHCVSS 2.0 7.5 Check source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-90840

Published

A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0. Affected is the function __construct of the file /application/controllers/admin/Dashboard.php of the component Admin Controllers. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit is publicly available and might be used.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-90840

Published

Blood Donor Management System

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "PHPGurukul",
                    "product": "Blood Donor Management System",
                    "versions": [
                        {
                            "version": "1.0",
                            "status": "affected"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:phpgurukul:blood_donor_management_system:*:*:*:*:*:*:*:*"
                    ],
                    "modules": [
                        "Admin Controllers"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON