CVE-2023-6474— PHPGurukul Nipah Virus Testing Management System manage-phlebotomist.php cross-site request forgery
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-6474
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PHPGurukul Nipah Virus Testing Management System manage-phlebotomist.php cross-site request forgery
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability has been found in PHPGurukul Nipah Virus Testing Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file manage-phlebotomist.php. The manipulation of the argument pid leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-246640.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
跨站请求伪造(CSRF)
Source: CVE Program / CVE List V5
Vulnerability Title
Nipah Virus Testing Management System 跨站请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Nipah virus Testing Management System是一个在线病毒诊断平台。 PHPGurukul Nipah Virus Testing Management System 1.0版本存在跨站请求伪造漏洞，该漏洞源于文件manage-phlebotomist.php的参数pid会导致跨站请求伪造。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| PHPGurukul | Nipah Virus Testing Management System | 1.0 | - |
II. Public POCs for CVE-2023-6474
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-6474
请登录查看更多情报信息。
Vendor Advisories for CVE-2023-6474 (2)
Other References for CVE-2023-6474 (1)
IV. Related Vulnerabilities
Same product: Nipah Virus Testing Management System
- CVE-2025-6157
PHPGurukul Nipah Virus Testing Management System registered- - CVE-2025-6156
PHPGurukul Nipah Virus Testing Management System bwdates-rep - CVE-2025-6127
PHPGurukul Nipah Virus Testing Management System search-repo - CVE-2025-5859
PHPGurukul Nipah Virus Testing Management System test-detail - CVE-2025-5858
PHPGurukul Nipah Virus Testing Management System patient-rep
Same vendor: PHPGurukul
- CVE-2026-19207
PHPGurukul Company Visitor Management System manage-newvisit - CVE-2026-6193
PHPGurukul Daily Expense Tracking System register.php sql in - CVE-2026-6162
PHPGurukul Company Visitor Management System bwdates-reports - CVE-2026-5840
PHPGurukul News Portal Project check_availability.php sql in - CVE-2026-5839
PHPGurukul News Portal Project add-subcategory.php sql injec
Same weakness: CWE-352
- CVE-2026-19650
Cross-Site Request Forgery (CSRF) in GitLab - CVE-2026-74867
SiYuan before 3.7.4 Cross-Site Request Forgery via CheckAuth - CVE-2026-17608
WP Compress <= 7.10.09 - Cross-Site Request Forgery to Arbit - CVE-2026-18165
@fastify/oauth2 vulnerable to Login CSRF via plantable OAuth - CVE-2026-67366
Joomla Extension - icagenda.com - CSRF on frontend registrat
V. Comments for CVE-2023-6474
No comments yet