Description (CNA)
A vulnerability was identified in PHPGurukul Bank Locker Management System 1.0. This affects an unknown function of the file /blms/view-assign-locker.php. The manipulation of the argument ltid leads to authorization bypass. The attack may be initiated remotely. The exploit is publicly available and might be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| PHPGurukul / Bank Locker Management System | affected 1.0 |
CWE
CWE-639, CWE-285
References
- https://vuldb.com/vuln/403104
- https://vuldb.com/vuln/403104/cti
- https://vuldb.com/cve/CVE-2026-90517
- https://vuldb.com/submit/912139
- https://github.com/wakakakaaaaha/vuln/issues/2
- https://phpgurukul.com/
ADP enrichment
No English description supplied.
No references supplied.