CVE-2025-15390: PHPGurukul Small CRM edit-user.php authorization
A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /admin/edit-user.php. The manipulation results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15390?
CVE-2025-15390 is considered a high severity vulnerability due to its potential for remote exploitation and authorization bypass.
How do I fix CVE-2025-15390?
To fix CVE-2025-15390, ensure that user authentication and authorization mechanisms are properly implemented in the affected file /admin/edit-user.php.
What systems are affected by CVE-2025-15390?
CVE-2025-15390 specifically affects PHPGurukul Small CRM version 4.0.
Can CVE-2025-15390 be exploited remotely?
Yes, CVE-2025-15390 can be exploited remotely due to the lack of proper authorization checks.
What type of vulnerability is CVE-2025-15390 classified as?
CVE-2025-15390 is classified as an authorization vulnerability resulting from improper access controls.