A vulnerability was found in PHPGurukul Car Rental Portal 3.0. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://medium.com/@kkfavas481/csrf-in-car-rental-portal-b202b3f2a4f6 | Exploit |
https://medium.com/@kkfavas481/csrf-in-car-rental-portal-b202b3f2a4f6 | Exploit |
https://phpgurukul.com/ | Product |
https://vuldb.com/?ctiid.313288 | Permissions Required VDB Entry |
https://vuldb.com/?id.313288 | Third Party Advisory VDB Entry |
https://vuldb.com/?submit.593775 | Third Party Advisory VDB Entry |
Configurations
History
26 Jun 2025, 21:36
Type | Values Removed | Values Added |
---|---|---|
First Time |
Phpgurukul car Rental Portal
Phpgurukul |
|
CPE | cpe:2.3:a:phpgurukul:car_rental_portal:3.0:*:*:*:*:*:*:* | |
References | () https://phpgurukul.com/ - Product | |
References | () https://medium.com/@kkfavas481/csrf-in-car-rental-portal-b202b3f2a4f6 - Exploit | |
References | () https://vuldb.com/?id.313288 - Third Party Advisory, VDB Entry | |
References | () https://vuldb.com/?ctiid.313288 - Permissions Required, VDB Entry | |
References | () https://vuldb.com/?submit.593775 - Third Party Advisory, VDB Entry |
23 Jun 2025, 20:15
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
CWE | CWE-862 |
19 Jun 2025, 23:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-06-19 23:15
Updated : 2025-06-26 21:36
NVD link : CVE-2025-6284
Mitre link : CVE-2025-6284
JSON object : View
Products Affected
phpgurukul
- car_rental_portal
CWE
No CWE.