PT-2026-4200 · Unknown · Phpgurukul Online Course Registration System
CVE-2025-70899
·
Publicado
2026-01-22
·
Atualizado
2026-02-02
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
PHPgurukul Online Course Registration version 3.1
Description
The application lacks Cross-Site Request Forgery (CSRF) protection on all administrative forms. An attacker can perform unauthorized actions on behalf of authenticated administrators by tricking them into visiting a malicious webpage.
Recommendations
Implement CSRF protection on all administrative forms.
Exploit
Correção
CSRF
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Phpgurukul Online Course Registration System