CVE-2023-7055

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic has been found in PHPGurukul Online Notes Sharing System 1.0. Affected is an unknown function of the file /user/profile.php of the component Contact Information Handler. The manipulation of the argument mobilenumber leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-248742 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-284 CWE-732

Affected software

Vendor	Product	Versions
PHPGurukul	Online Notes Sharing System	1.0

References

https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/notes_parameter_tampering.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.248742Permissions Required, Third Party Advisory
https://vuldb.com/?id.248742Third Party Advisory
https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/notes_parameter_tampering.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.248742Permissions Required, Third Party Advisory
https://vuldb.com/?id.248742Third Party Advisory

Timeline

Published: Dec 22, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-70565.4A vulnerability classified as problematic was found in code-projects Faculty Management System 1.0. Affected by this vulnerability is an unk CVE-2023-70576.1A vulnerability, which was classified as problematic, has been found in code-projects Faculty Management System 1.0. Affected by this issue CVE-2023-70589.8A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as critical. Affected by this vulnera CVE-2023-70595.4A vulnerability was found in SourceCodester School Visitor Log e-Book 1.0. It has been rated as problematic. Affected by this issue is some CVE-2023-70607.5Zephyr OS IP packet handling does not properly drop IP packets arriving on an external interface with a source address equal to 127.0.01 or CVE-2023-70618.8The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 2.5.CVE-2023-70628.8The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4. Th CVE-2023-70636.1The WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission parameters in all versions up to, and CVE-2023-70647.5The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and incl CVE-2023-70655.4The Stop Spammers Security | Block Spam Users, Comments, Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versi CVE-2023-70667.8The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PDF files. T CVE-2023-70674.3The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) plugin for WordPress i