CVE-2024-55058: phpgurukul online_birth_certificate_system

Vulnerability summary

CVE-2024-55058 is a medium (CVSS 4.3) vulnerability in phpgurukul online_birth_certificate_system. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 14.2% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 17-12-2024
   PublishedVulnerability first disclosed.
2. 18-12-2024
   Last modifiedVulnerability information updated.

Description

An insecure direct object reference (IDOR) vulnerability was discovered in PHPGurukul Online Birth Certificate System v1.0. This vulnerability resides in the viewid parameter of /user/view-application-detail.php. Authenticated users can exploit this flaw by manipulating the viewid parameter in the URL to access sensitive birth certificate details of other users without proper authorization checks.

• CWE-706Use of Incorrectly-Resolved Name or ReferenceThe product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.