Aggregator

CVE-2025-2090 | PHPGurukul Pre-School Enrollment System 1.0 Sub Admin /admin/add-subadmin.php access control

VulDB Recent Entries
9 months 1 week ago
A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php of the component Sub Admin Handler. The manipulation leads to improper access controls. This vulnerability is handled as CVE-2025-2090. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-2089 | StarSea99 starsea-mall 1.0/2.X com.siro.mall.controller.mall.UserController /personal/updateInfo updateUserInfo userId access control

VulDB Recent Entries
9 months 1 week ago
A vulnerability has been found in StarSea99 starsea-mall 1.0/2.X and classified as critical. Affected by this vulnerability is the function updateUserInfo of the file /personal/updateInfo of the component com.siro.mall.controller.mall.UserController. The manipulation of the argument userId leads to improper access controls. This vulnerability is known as CVE-2025-2089. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com

Best Vulnerability Scanning Tool in 2025: AutoSecT

Security Boulevard
9 months 1 week ago

In the constantly evolving world of cybersecurity, hackers continuously seek out vulnerabilities, exploit misconfigurations, and attempt to breach IT infrastructures. To counter these threats, vulnerability scanning tools serve as a crucial management solution, offering automated assessments and authenticated security scans across various systems, from endpoint devices to web applications. Vulnerability scanning systematically analyzes target systems […]

The post Best Vulnerability Scanning Tool in 2025: AutoSecT appeared first on kratikalsite.

The post Best Vulnerability Scanning Tool in 2025: AutoSecT appeared first on Security Boulevard.

Shikha Dhingra

CVE-2025-2088 | PHPGurukul Pre-School Enrollment System up to 1.0 /admin/profile.php fullname/emailid/mobileNumber sql injection

VulDB Recent Entries
9 months 1 week ago
A vulnerability, which was classified as critical, was found in PHPGurukul Pre-School Enrollment System up to 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument fullname/emailid/mobileNumber leads to sql injection. This vulnerability is traded as CVE-2025-2088. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com

Managed ad