Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-457m-59w6-w674

Опубликовано: 15 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

A Cross-Site Request Forgery (CSRF) vulnerability was identified in the Profile Page of the PHPGurukul Student-Result-Management-System-Using-PHP-V2.0. This flaw allows an attacker to trick authenticated users into unintentionally modifying their account details. By crafting a malicious HTML page, an attacker can submit unauthorized requests to the vulnerable endpoint: /create-class.php.

A Cross-Site Request Forgery (CSRF) vulnerability was identified in the Profile Page of the PHPGurukul Student-Result-Management-System-Using-PHP-V2.0. This flaw allows an attacker to trick authenticated users into unintentionally modifying their account details. By crafting a malicious HTML page, an attacker can submit unauthorized requests to the vulnerable endpoint: /create-class.php.

EPSS

Процентиль: 3%
0.00016
Низкий

7.3 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 7.3
nvd
5 месяцев назад

A Cross-Site Request Forgery (CSRF) vulnerability was identified in the Profile Page of the PHPGurukul Student-Result-Management-System-Using-PHP-V2.0. This flaw allows an attacker to trick authenticated users into unintentionally modifying their account details. By crafting a malicious HTML page, an attacker can submit unauthorized requests to the vulnerable endpoint: /create-class.php.

EPSS

Процентиль: 3%
0.00016
Низкий

7.3 High

CVSS3

Дефекты

CWE-352