CVE-2024-55232

MEDIUM

PHPGurukul Online Notes Sharing Management System 1.0 - Insecure Direct Object Reference

Title source: llm
STIX 2.1

Description

An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to delete notes belonging to other accounts due to missing authorization checks. This flaw enables attackers to delete another user's information.

References (1)

Core 1

Scores

CVSS v3 5.4
EPSS 0.0036
EPSS Percentile 27.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-290
Status published
Products (1)
phpgurukul/online_notes_sharing_management_system 1.0
Published Dec 18, 2024
Tracked Since Feb 18, 2026