Aggregator

CVE-2025-2090 | PHPGurukul Pre-School Enrollment System 1.0 Sub Admin /admin/add-subadmin.php access control

VulDB Recent Entries
9 months 1 week ago
A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php of the component Sub Admin Handler. The manipulation leads to improper access controls. This vulnerability is handled as CVE-2025-2090. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-2089 | StarSea99 starsea-mall 1.0/2.X com.siro.mall.controller.mall.UserController /personal/updateInfo updateUserInfo userId access control

VulDB Recent Entries
9 months 1 week ago
A vulnerability has been found in StarSea99 starsea-mall 1.0/2.X and classified as critical. Affected by this vulnerability is the function updateUserInfo of the file /personal/updateInfo of the component com.siro.mall.controller.mall.UserController. The manipulation of the argument userId leads to improper access controls. This vulnerability is known as CVE-2025-2089. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com

Managed ad