CVE-2023-3605

MEDIUM

PHPGurukul Online Shopping Portal 1.0 - Auth Bypass

Title source: llm
STIX 2.1

Description

A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Registration Page. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-233467.

References (2)

Core 2
Core References
Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.233467
Permissions Required signature
https://vuldb.com/?ctiid.233467

Scores

CVSS v3 6.5
EPSS 0.0006
EPSS Percentile 19.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-307
Status published
Products (1)
phpgurukul/online_shopping_portal 1.0
Published Jul 10, 2023
Tracked Since Feb 18, 2026