CVE-2024-55058

MEDIUM

4.3

Descripcion

An insecure direct object reference (IDOR) vulnerability was discovered in PHPGurukul Online Birth Certificate System v1.0. This vulnerability resides in the viewid parameter of /user/view-application-detail.php. Authenticated users can exploit this flaw by manipulating the viewid parameter in the URL to access sensitive birth certificate details of other users without proper authorization checks.

Detalles CVE

Puntuacion CVSS v3.14.3

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosLOW

Interaccion usuarioNONE

Publicado12/17/2024

Ultima modificacion3/27/2025

Fuentenvd

Avistamientos honeypot0

Productos afectados

phpgurukul:online_birth_certificate_system

Debilidades (CWE)

CWE-706

Referencias

https://github.com/SCR-athif/CVE/tree/main/CVE-2024-55058(cve@mitre.org)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.