CVE-2023-1964: fallo de gravedad alta en PHPGurukul Bank Locker Management System
PHPGurukul Bank Locker Management System Password Reset recovery.php sql injection
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.3epss 1.0%
A vulnerability classified as critical has been found in PHPGurukul Bank Locker Management System 1.0. Affected is an unknown function of the file recovery.php of the component Password Reset. The manipulation of the argument uname/mobile leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225360.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Productos afectados
PHPGurukul · Bank Locker Management SystemCVEs relacionadas — PHPGurukul Bank Locker Management System
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-0562HIGHPHPGurukul Bank Locker Management System Login index.php sql injectionEPSS 44.3%CVE-2023-0563LOWPHPGurukul Bank Locker Management System Assign Locker add-locker-form.php cross site scriptingEPSS 37.6%CVE-2023-1963MEDIUMPHPGurukul Bank Locker Management System Search index.php sql injectionEPSS 0.7%CVE-2026-90517MEDIUMPHPGurukul Bank Locker Management System view-assign-locker.php authorizationEPSS 0.6%CVE-2025-2684MEDIUMPHPGurukul Bank Locker Management System search-report-details.php sql injectionEPSS 0.5%CVE-2025-2683MEDIUMPHPGurukul Bank Locker Management System profile.php sql injectionEPSS 0.5%