CVE-2025-2093— PHPGurukul Online Library Management System change-password.php password recovery
Quick assessment
Affected
PHPGurukul Online Library Management System
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
PHPGurukul Online Library Management System是PHPGurukul公司的一个在线图书管理系统。 PHPGurukul Online Library Management System 3.0版本存在安全漏洞，该漏洞源于email/phone number参数操作不当，可能导致弱密码恢复。
Possible ATT&CK Techniques 1 AI
T1136.001 · Local Account
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-2093
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PHPGurukul Online Library Management System change-password.php password recovery
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was found in PHPGurukul Online Library Management System 3.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /change-password.php. The manipulation of the argument email/phone number leads to weak password recovery. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
忘记口令恢复机制弱
Source: CVE Program / CVE List V5
Vulnerability Title
PHPGurukul Online Library Management System 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PHPGurukul Online Library Management System是PHPGurukul公司的一个在线图书管理系统。 PHPGurukul Online Library Management System 3.0版本存在安全漏洞，该漏洞源于email/phone number参数操作不当，可能导致弱密码恢复。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| PHPGurukul | Online Library Management System | 3.0 | - |
|
II. Public POCs for CVE-2025-2093
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-2093
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-2093 (2)
-
CVE-2025-2093 PHPGurukul Online Library Management System change-password.php password recovery vdb-entry technical-description
Proof of Concept for CVE-2025-2093 (1)
Security Blog Posts for CVE-2025-2093 (1)
Same Patch Batch · PHPGurukul · 2025-03-07 · 11 CVEs total
| CVE-2025-2057 | 7.3 HIGH | PHPGurukul Emergency Ambulance Hiring Portal about-us.php sql injection |
| CVE-2025-2058 | 7.3 HIGH | PHPGurukul Emergency Ambulance Hiring Portal search.php sql injection |
| CVE-2025-2059 | 7.3 HIGH | PHPGurukul Emergency Ambulance Hiring Portal booking-details.php sql injection |
| CVE-2025-2060 | 7.3 HIGH | PHPGurukul Emergency Ambulance Hiring Portal admin-profile.php sql injection |
| CVE-2025-2088 | 7.3 HIGH | PHPGurukul Pre-School Enrollment System profile.php sql injection |
| CVE-2025-2051 | 6.3 MEDIUM | PHPGurukul Apartment Visitors Management System search-visitor.php sql injection |
| CVE-2025-2052 | 6.3 MEDIUM | PHPGurukul Apartment Visitors Management System forgot-password.php sql injection |
| CVE-2025-2053 | 6.3 MEDIUM | PHPGurukul Apartment Visitors Management System visitor-detail.php sql injection |
| CVE-2025-2090 | 4.7 MEDIUM | PHPGurukul Pre-School Enrollment System Sub Admin add-subadmin.php access control |
| CVE-2025-2084 | 3.5 LOW | PHPGurukul Human Metapneumovirus Testing Management System Search Report Page search-repor |
IV. Related Vulnerabilities
Same product: Online Library Management System
Same vendor: PHPGurukul
-
CVE-2026-105703
PHPGurukul User Registration & Login and User Management Sys -
CVE-2026-90851
PHPGurukul Hostel Management System checklogin.php access co -
CVE-2026-90850
PHPGurukul Hostel Management System manage-students.php cros -
CVE-2026-90846
PHPGurukul Daily Expense Tracker System forgot-password.php -
CVE-2026-90845
PHPGurukul Daily Expense Tracker System sidebar.php cross si
Same weakness: CWE-640
-
CVE-2026-16437
An authentication bypass vulnerability in GENESIS, GENESIS64 -
CVE-2026-16436
An authentication bypass vulnerability in GENESIS, GENESIS64 -
CVE-2026-108337
Password Reset Code Accessible in User Listing API -
CVE-2026-108335
Password Reset Functionality Missing Brute-Force Protection -
CVE-2026-63159
Omnispace Agora Project < 26.10.0 Predictable Password-Reset
V. Comments for CVE-2025-2093
No comments yet