CVE Catalog

CVE-2023-3605

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.57%

43th percentile - higher than 43% of all known CVEs

Summary

A critical vulnerability was found in PHPGurukul Online Shopping Portal 1.0 in an unknown functionality of the Registration Page. Manipulation of this vulnerability leads to improper restriction of excessive authentication attempts.

Risk Assessment

An attacker can remotely exploit this vulnerability, potentially leading to unauthorized access to the system. Organizations should be aware of the risks associated with excessive login attempts.

Recommendation

It is recommended to update to the latest version of PHPGurukul Online Shopping Portal and implement mechanisms to limit login attempts.

Original NVD description (English source)

A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Registration Page. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-233467.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS