3.5
CVE-2024-55271
- EPSS 0.13%
- Veröffentlicht 17.02.2026 00:00:00
- Zuletzt bearbeitet 23.02.2026 16:06:41
- CVE-Watchlists
- Unerledigt
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phpgurukul ≫ Gym Management System Version1.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.13% | 0.029 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| CISA-ADP | 3.5 | 2.1 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
|
CWE-352 Cross-Site Request Forgery (CSRF)
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
https://github.com/shoaibalam112/Gym_Management_system
https://github.com/shoaibalam112/CVE-2024-55271/blob/main/README.md