CVE-2023-3605
PHPGurukul Online Shopping Portal Registration Page excessive authentication
- State
- Published
- Severity
- 6.5 Medium
- Published
- Jul 10, 2023
- Updated
- Oct 15, 2024
- Reserved
- Jul 10, 2023
Description
A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Registration Page. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-233467.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L | VulDB |
| 3.0 | 6.5 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L | VulDB |
| 2.0 | 6.4 Medium | AV:N/AC:L/Au:N/C:N/I:P/A:P | VulDB |
Weaknesses
- CWE-307 Improper Restriction of Excessive Authentication Attempts
Affected Products
| Product | Versions |
|---|---|
Online Shopping PortalPHPGurukul |
|
References
- https://vuldb.com/?id.233467vdb-entrytechnical-description
- https://vuldb.com/?ctiid.233467signature
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.