PHPGurukul 1.0 Registration Page Auth Brute Force Vulnerability
CVE-2023-3605 Published on July 10, 2023

PHPGurukul Online Shopping Portal Registration Page excessive authentication
A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Registration Page. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-233467.

NVD

Timeline

Advisory disclosed

CVE reserved

VulDB entry created

VulDB entry last update 17 days later.

Weakness Type

Improper Restriction of Excessive Authentication Attempts

The software does not implement sufficient measures to prevent multiple failed authentication attempts within in a short time frame, making it more susceptible to brute force attacks.


Products Associated with CVE-2023-3605

stack.watch emails you whenever new vulnerabilities are published in Onlineshoppingportalproject Online Shopping Portal or PHPGurukul Online Shopping Portal. Just hit a watch button to start following.

 
 

Affected Versions

PHPGurukul Online Shopping Portal Version 1.0 is affected by CVE-2023-3605

Exploit Probability

EPSS
0.05%
Percentile
14.73%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.