Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-56710

Опубликовано: 15 сент. 2025
Источник: nvd
CVSS3: 7.3
EPSS Низкий

Описание

A Cross-Site Request Forgery (CSRF) vulnerability was identified in the Profile Page of the PHPGurukul Student-Result-Management-System-Using-PHP-V2.0. This flaw allows an attacker to trick authenticated users into unintentionally modifying their account details. By crafting a malicious HTML page, an attacker can submit unauthorized requests to the vulnerable endpoint: /create-class.php.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:phpgurukul:student_result_management_system:2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 1%
0.00013
Низкий

7.3 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 7.3
github
5 месяцев назад

A Cross-Site Request Forgery (CSRF) vulnerability was identified in the Profile Page of the PHPGurukul Student-Result-Management-System-Using-PHP-V2.0. This flaw allows an attacker to trick authenticated users into unintentionally modifying their account details. By crafting a malicious HTML page, an attacker can submit unauthorized requests to the vulnerable endpoint: /create-class.php.

EPSS

Процентиль: 1%
0.00013
Низкий

7.3 High

CVSS3

Дефекты

CWE-352