CVE-2023-6766 — Cross-Site Request Forgery in Teacher Subject Allocation Management System

CWE-352 — Cross-Site Request Forgery3 documents3 sources
Severity
3.5LOWNVD
CNA4.3
EPSS
0.1%
top 74.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Teacher Subject Allocation Management System
Timeline
PublishedDec 13

Description

A vulnerability classified as problematic has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the file /admin/course.php of the component Delete Course Handler. The manipulation of the argument delid leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-247896.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:LExploitability: 0.9 | Impact: 2.5

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
PHPGurukul Teacher Subject Allocation Management System Delete Course course.php cross-site request forgery↗2023-12-13
▶
GHSA
GHSA-q86q-3rhp-gfqv: A vulnerability classified as problematic has been found in PHPGurukul Teacher Subject Allocation Management System 1↗2023-12-13
▶
CVE-2023-6766 — Cross-Site Request Forgery | cvebase