Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-6162: PHPGurukul Visitor Management System 2.0 allows remote code execution

CVE-2026-6162 · published 6 months ago

Summary

A security flaw in the PHPGurukul Visitor Management System 2.0 allows hackers to run malicious code on your website, potentially giving them access to sensitive information. This affects the way the system processes dates and times. To protect yourself, update to the latest version of the software or consider replacing it with a more secure alternative.

Original advisory text

A vulnerability has been found in PHPGurukul Company Visitor Management System 2.0. This impacts an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

References

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

2.0 Low

Exploitation

<1% chance of attack within 30 days

Type

CWE-79Cross-site Scripting (XSS)

CWE-94Code Injection

Timeline

Published13 Apr 2026

Updated4 Nov 2026

First seen13 Apr 2026

Sources

CVE-2026-6162 · NVD

Track software like this

Free during beta