CVE-2023-3605

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Registration Page. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-233467.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-307

Affected software

Vendor	Product	Versions
PHPGurukul	Online Shopping Portal	1.0

References

https://vuldb.com/?ctiid.233467Permissions Required
https://vuldb.com/?id.233467Third Party Advisory
https://vuldb.com/?ctiid.233467Permissions Required
https://vuldb.com/?id.233467Third Party Advisory

Timeline

Published: Jul 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-360508.0Microsoft Exchange Server Spoofing Vulnerability CVE-2023-360528.6Azure CLI REST Command Information Disclosure Vulnerability CVE-2023-360537.5In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regula CVE-2023-360546.5lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authen CVE-2023-36068.8A vulnerability was found in TamronOS up to 20230703. It has been classified as critical. This affects an unknown part of the file /api/ping CVE-2023-36078.0A vulnerability was found in kodbox 1.26. It has been declared as critical. This vulnerability affects the function Execute of the file webc CVE-2023-360769.8SQL Injection vulnerability in smanga version 3.1.9 and earlier, allows remote attackers to execute arbitrary code and gain sensitive inform CVE-2023-36088.8A vulnerability was found in Ruijie BCR810W 2.5.10. It has been rated as critical. This issue affects some unknown processing of the compone CVE-2023-360815.4Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W allows a remote attacker to execute arbitrary code CVE-2023-360829.8An isssue in GatesAIr Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to gain privileges via the LDAP and SMTP credentials.CVE-2023-360856.1The sisqualWFM 7.1.319.103 thru 7.1.319.111 for Android, has a host header injection vulnerability in its "/sisqualIdentityServer/core/" end CVE-2023-360887.5Server Side Request Forgery (SSRF) vulnerability in NebulaGraph Studio version 3.7.0, allows remote attackers to gain sensitive information.