PT-2023-24968 · Unknown · Phpgurukul User Registration & Login/User Management System

Published 2023-06-29 · Updated 2023-07-07 · CVE-2023-34648

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHPgurukl User Registration Login and User Management System with admin panel version 1.0

Description A Cross Site Scripting issue allows a local attacker to execute arbitrary code via a crafted script to the "signup.php" endpoint.

Recommendations For PHPgurukl User Registration Login and User Management System with admin panel version 1.0, consider validating and sanitizing user input in the signup.php script to prevent the execution of arbitrary code. As a temporary workaround, restrict access to the signup.php endpoint until a proper fix is applied.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-34648

Affected Products

Phpgurukul User Registration & Login/User Management System

References · 3

• 🔥❌ https://github.com/ckalnarayan/Common-Vulnerabilities-and-Exposures/blob/main/CVE-2023-34648 · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2023-34648 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-34648 · Security Note