CVE-2025-15406

MEDIUM

PHPGurukul Online Course Registration < 3.1 - Missing Authorization

Title source: llm
STIX 2.1

Description

A flaw has been found in PHPGurukul Online Course Registration up to 3.1. This affects an unknown function. This manipulation causes missing authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.339326
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.339326
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.728354
Product product
https://phpgurukul.com/

Scores

CVSS v3 6.3
EPSS 0.0042
EPSS Percentile 33.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-862 CWE-863
Status published
Products (1)
phpgurukul/online_course_registration < 3.1
Published Jan 01, 2026
Tracked Since Feb 18, 2026