CVE-2023-7055: PHPGurukul Online Notes Sharing System Contact Information profile.php access control
First published: Fri Dec 22 2023(Updated: )
A vulnerability classified as problematic has been found in PHPGurukul Online Notes Sharing System 1.0. Affected is an unknown function of the file /user/profile.php of the component Contact Information Handler. The manipulation of the argument mobilenumber leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-248742 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-7055?
CVE-2023-7055 is classified as a problematic vulnerability.
How does CVE-2023-7055 impact the PHPGurukul Online Notes Sharing System?
CVE-2023-7055 affects the contact information handler, allowing unauthorized access when manipulating the 'mobilenumber' argument.
Which version of PHPGurukul Online Notes Sharing System is affected by CVE-2023-7055?
Only version 1.0 of the PHPGurukul Online Notes Sharing System is affected by CVE-2023-7055.
How can I mitigate CVE-2023-7055 in my application?
To mitigate CVE-2023-7055, ensure proper validation and sanitization of user inputs, specifically the mobilenumber parameter.
What type of vulnerability is CVE-2023-7055?
CVE-2023-7055 is an improper access control vulnerability.
- agent/weakness
- agent/type
- agent/first-publish-date
- agent/severity
- agent/title
- agent/references
- agent/author
- agent/description
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/softwarecombine
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/source
- vendor/phpgurukul
- canonical/phpgurukul online notes sharing system
- version/phpgurukul online notes sharing system/1.0