What’s Vulnerable › Vulnerabilities

CVE-2023-7055: PHPGurukul Online Notes Sharing System Contact Information profile.php access control

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-12-22 · updated 2026-06-17
• Weakness: CWE-284

Description

A vulnerability classified as problematic has been found in PHPGurukul Online Notes Sharing System 1.0. Affected is an unknown function of the file /user/profile.php of the component Contact Information Handler. The manipulation of the argument mobilenumber leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-248742 is the identifier assigned to this vulnerability.

Affected products

• PHPGurukul Online Notes Sharing System: 1.0

References

• https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/notes_parameter_tampering.md
• https://vuldb.com/?ctiid.248742
• https://vuldb.com/?id.248742
• https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/notes_parameter_tampering.md
• https://vuldb.com/?ctiid.248742
• https://vuldb.com/?id.248742

Get alerted when CVE-2023-7055 or the next vulnerability affects your stack