CVE-2023-7055
Assigner: VulDB
Published: 2023-12-22T02:31:04.126Z
State: PUBLISHED
title: PHPGurukul Online Notes Sharing System Contact Information profile.php access control
problemTypes: descriptions: type: CWE
cweId: CWE-284
description: CWE-284 Improper Access Controls
affected: vendor: PHPGurukul
product: Online Notes Sharing System
versions: version: 1.0
status: affected
modules: Contact Information Handler
descriptions: value: A vulnerability classified as problematic has been found in PHPGurukul Online Notes Sharing System 1.0. Affected is an unknown function of the file /user/profile.php of the component Contact Information Handler. The manipulation of the argument mobilenumber leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-248742 is the identifier assigned to this vulnerability.
value: Es wurde eine problematische Schwachstelle in PHPGurukul Online Notes Sharing System 1.0 entdeckt. Es geht dabei um eine nicht klar definierte Funktion der Datei /user/profile.php der Komponente Contact Information Handler. Durch Beeinflussen des Arguments mobilenumber mit unbekannten Daten kann eine improper access controls-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Der Exploit steht zur öffentlichen Verfügung.
metrics: cvssV3_1: version: 3.1
baseScore: 4.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
baseSeverity: MEDIUM
cvssV3_0: version: 3.0
baseScore: 4.3
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
baseSeverity: MEDIUM
cvssV2_0: version: 2.0
baseScore: 4
vectorString: AV:N/AC:L/Au:S/C:N/I:P/A:N
timeline: time: 2023-12-21T00:00:00.000Z
value: Advisory disclosed
time: 2023-12-21T01:00:00.000Z
value: VulDB entry created
time: 2023-12-21T17:18:29.000Z
value: VulDB entry last update
credits: value: dhabaleshwar (VulDB User)
type: analyst