Description
A flaw has been found in PHPGurukul Online Course Registration up to 3.1. This affects an unknown function. This manipulation causes missing authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used.
References
https://github.com/rsecroot/Online-Course-Registration/blob/main/Broken%20Access%20Control.md
ExploitThird Party Advisory
Product
https://vuldb.com/?ctiid.339326
Permissions RequiredVDB Entry
Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.728354
Third Party AdvisoryVDB Entry
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
6.3 · Medium
Information
Source identifier
Vulnerability status
Analyzed
Published
2026-01-01T17:15:42.753Z
2 weeks agoLast modified
2026-01-06T18:37:36.877Z
1 week ago