Description
A flaw has been found in PHPGurukul Online Course Registration up to 3.1. This affects an unknown function. This manipulation causes missing authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Affected products
phpgurukul: online course registration
References5
- github.com/rsecroot/Online-Course-Registration/blob/main/Broken… ExploitThird Party Advisory
- phpgurukul.com/ Product
- vuldb.com/?ctiid.339326 Permissions RequiredVDB Entry
- vuldb.com/?id.339326 Third Party AdvisoryVDB Entry
- vuldb.com/?submit.728354 Third Party AdvisoryVDB Entry
Metrics
- CVSS 3.1
-
8.8
HIGH
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 4.0
-
2.1
LOW
Score source: CNA
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — exploit probability
- 0% percentile: 40 · as of 11 November 2026
- CWE
- CWE-862CWE-863
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.