PT-2023-24968 · Unknown · Phpgurukul User Registration & Login/User Management System
CVE-2023-34648
·
Publicado
2023-06-29
·
Atualizado
2023-07-07
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
PHPgurukl User Registration Login and User Management System with admin panel version 1.0
Description
A Cross Site Scripting issue allows a local attacker to execute arbitrary code via a crafted script to the "signup.php" endpoint.
Recommendations
For PHPgurukl User Registration Login and User Management System with admin panel version 1.0, consider validating and sanitizing user input in the
signup.php script to prevent the execution of arbitrary code. As a temporary workaround, restrict access to the signup.php endpoint until a proper fix is applied.Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Phpgurukul User Registration & Login/User Management System