Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PHPGurukul Online Library Management System change-password.php password recovery
Vulnerability Description
A vulnerability was found in PHPGurukul Online Library Management System 3.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /change-password.php. The manipulation of the argument email/phone number leads to weak password recovery. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Vulnerability Type
忘记口令恢复机制弱
Vulnerability Title
PHPGurukul Online Library Management System 授权问题漏洞
Vulnerability Description
PHPGurukul Online Library Management System是PHPGurukul公司的一个在线图书管理系统。 PHPGurukul Online Library Management System 3.0版本存在安全漏洞，该漏洞源于email/phone number参数操作不当，可能导致弱密码恢复。
CVSS Information
N/A
Vulnerability Type
N/A