CNNVD-202509-4468 Information
Sep 30, 2025
cve
CNNVD ID
CNNVD-202509-4468
Related CVE
- CNNVD Published: 2025-09-30
Description (Chinese)
PHPGurukul User Registration & Login and User Management System是PHPGurukul公司的一个用户注册登录及用户管理系统。 PHPGurukul User Registration & Login and User Management System V3.3版本存在安全漏洞，该漏洞源于loginsystem/edit-profile.php中参数fname、lname和contact未经验证输入，可能导致反射型跨站脚本攻击。
Description (English)
PHPGurukul User Registration & Login and User Management System is a user registration and user management system for PHPGurukul. PHPGurukul User Registration & Login and User Management System V3.3 has a security loophole, which stems from the unverified input of the parameters fname, lname and contract in loginsystem/edit-profile.php and may result in a cross-script attack.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
PHPGurukul
Published
2025-09-30
Last Modified
2026-02-24