by Kastro
Paper/Archive/CVE-2023-3605

CVE-2023-3605

PHPGurukul Online Shopping Portal — PHPGurukul Online Shopping Portal Registration Page excessive authentication

EPSS 0.7%CVSS 9.1
critical.is priorityof 100
38
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 52.4.524 × 2010.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Registration Page. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-233467.

Affected

ProductAffectedFixed inSource
Online Shopping Portal1.0–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
VulDB (CNA)6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
VulDB (CNA)6.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

writeupvuldb.com/?id.233467refvuldb.com/?ctiid.233467