PT-2023-32854 · Unknown · Phpgurukul Online Notes Sharing System

Dhabaleshwar · Published 2023-12-22 · Updated 2024-05-17 · CVE-2023-7053

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Notes Sharing System version 1.0

Description A vulnerability was found in the PHPGurukul Online Notes Sharing System, affecting unknown code of the file /user/signup.php. This issue leads to weak password requirements. The attack can be initiated remotely, with a rather high complexity and difficult exploitation. The exploit has been disclosed to the public and may be used.

Recommendations For PHPGurukul Online Notes Sharing System version 1.0, consider implementing stronger password requirements to mitigate the risk of exploitation. As a temporary workaround, restrict access to the /user/signup.php file until a patch is available. Additionally, review and enhance the password validation process to prevent weak passwords from being used.

Exploit

Fix

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2023-7053

Affected Products

Phpgurukul Online Notes Sharing System

References · 7

• 🔥 https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/note_weakpass.md · Exploit
• https://osv.dev/vulnerability/CVE-2023-7053 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-7053 · Security Note
• https://vuldb.com/?id.248740 · Note
• https://t.me/cvenotify/65387 · Telegram Post
• https://t.me/cvenotify/64822 · Telegram Post
• https://vuldb.com/?ctiid.248740 · Note