PT-2023-32854 · Unknown · Phpgurukul Online Notes Sharing System

Dhabaleshwar · Publicado 2023-12-22 · Atualizado 2024-05-17 · CVE-2023-7053

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Notes Sharing System version 1.0

Description A vulnerability was found in the PHPGurukul Online Notes Sharing System, affecting unknown code of the file /user/signup.php. This issue leads to weak password requirements. The attack can be initiated remotely, with a rather high complexity and difficult exploitation. The exploit has been disclosed to the public and may be used.

Recommendations For PHPGurukul Online Notes Sharing System version 1.0, consider implementing stronger password requirements to mitigate the risk of exploitation. As a temporary workaround, restrict access to the /user/signup.php file until a patch is available. Additionally, review and enhance the password validation process to prevent weak passwords from being used.

Exploit

Correção

Enumeração de Fraquezas

CWE-521

Identificadores relacionados

CVE-2023-7053

Produtos afetados

Phpgurukul Online Notes Sharing System

Referências · 7

• 🔥 https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/note_weakpass.md · Exploit
• https://osv.dev/vulnerability/CVE-2023-7053 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-7053 · Nota de Segurança
• https://vuldb.com/?id.248740 · Nota
• https://t.me/cvenotify/65387 · Publicação no Telegram
• https://t.me/cvenotify/64822 · Publicação no Telegram
• https://vuldb.com/?ctiid.248740 · Nota