Skip to content
OpenAdvisories
High · 7.3 CVE-2025-56710 EUVD-2025-29189GHSA-457m-59w6-w674

A Cross-Site Request Forgery (CSRF) vulnerability was identified in the Profile Page of the PHPGurukul Student-Result-Management-System-Usi…

Published Sep 15, 2025 · Updated Sep 15, 2025 · Assigned by mitre

Description

A Cross-Site Request Forgery (CSRF) vulnerability was identified in the Profile Page of the PHPGurukul Student-Result-Management-System-Using-PHP-V2.0. This flaw allows an attacker to trick authenticated users into unintentionally modifying their account details. By crafting a malicious HTML page, an attacker can submit unauthorized requests to the vulnerable endpoint: /create-class.php.

References