PT-2024-36465 · Unknown · Phpgurukul Online Birth Certificate System

Mohammed Athif · Published 2024-12-17 · Updated 2025-03-27 · CVE-2024-55057

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Phpgurukul Online Birth Certificate System version 1.0

Description The issue is related to insufficient password requirements, which can lead to unauthorized access to user accounts. This weakness in password rules can allow someone to access user accounts without permission.

Recommendations For Phpgurukul Online Birth Certificate System version 1.0, consider implementing stronger password requirements to mitigate the risk of unauthorized access. As a temporary workaround, restrict access to sensitive features of the system until a more secure password policy is in place. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-916

Related Identifiers

CVE-2024-55057

Affected Products

Phpgurukul Online Birth Certificate System

References · 8

• 🔥 https://github.com/SCR-athif/CVE/tree/main/CVE-2024-55057 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-55057 · Security Note
• https://osv.dev/vulnerability/CVE-2024-55057 · Vendor Advisory
• https://t.me/cvedetector/13131 · Telegram Post
• https://t.me/cvenotify/116536 · Telegram Post
• https://twitter.com/CVEnew/status/1869123012894617739 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1869148104336761293 · Twitter Post
• https://t.me/cvenotify/104631 · Telegram Post