CVE-2025-45947

Katalog CVE

CVSS 9.8 · Critical EPSS 0,78%

Kerentanan Improper Control of Generation of Code ('Code Injection') pada phpgurukul online banquet booking system. Skor CVSS 3.1 9.8 (Critical) menurut CISA ADP.

Deskripsi (NVD)

An issue in phpgurukul Online Banquet Booking System V1.2 allows an attacker to execute arbitrary code via the /obbs/change-password.php file of the My Account - Change Password component

Rincian

Terbit di NVD

28 April 2025

Terakhir diubah

5 Juli 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-94: Improper Control of Generation of Code ('Code Injection')

EPSS (30 hari)

0,78% peluang dieksploitasi; lebih tinggi dari 54,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/VasilVK/CVE/blob/main/CVE-2025-45947/README.MD exploit · advisory pihak ketiga