CVE-2025-15406

Katalog CVE

CVSS 8.8 · High EPSS 0,46%

Kerentanan Missing Authorization pada phpgurukul online course registration. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

A flaw has been found in PHPGurukul Online Course Registration up to 3.1. This affects an unknown function. This manipulation causes missing authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used.

Rincian

Terbit di NVD

1 Januari 2026

Terakhir diubah

7 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-862: Missing Authorization
CWE-863: Incorrect Authorization

EPSS (30 hari)

0,46% peluang dieksploitasi; lebih tinggi dari 37,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/rsecroot/Online-Course-Registration/blob/main/Broken%20Access%20Control.md exploit · advisory pihak ketiga
• https://vuldb.com/?id.339326 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.728354 advisory pihak ketiga · vdb entry
• https://phpgurukul.com/ product
• https://vuldb.com/?ctiid.339326 permissions required · vdb entry