CVE-2024-12955

MEDIUM

PHPGurukul Blood Bank & Donor Management System logout.php cross-site request forgery

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2024-12955 has a selected CVSS score of 6.9 (medium); EIP currently links 1 catalogued exploit.

Description

A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as problematic. This vulnerability affects unknown code of the file /logout.php. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 26, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Blood Bank & Donor Management System

Browse PHPGurukul / Blood Bank & Donor Management System
CVE List2.4affected

Proofs of concept

1

Catalogued exploits

ExploitDBBlood Bank & Donor Management System 2.4 - CSRF Improper Input ValidationExploitDB exploitby Kwangyun KeumNot analyzed1 file
ExploitDB
PoC details

References

5
Submit #468878 | https://phpgurukul.com/ Blood Bank & Donor Management System v2.4 CSRF Improper Input ValidationThird-party advisory
https://vuldb.com/?submit.468878