Threats Tagged 'cve-2025-70899'

CVE-2025-70899 is a medium-severity vulnerability in PHPgurukul Online Course Registration v3.1 caused by the absence of Cross-Site Request Forgery (CSRF) protection on all administrative forms. This flaw allows attackers to trick authenticated administrators into performing unauthorized actions by visiting malicious web pages, potentially leading to integrity compromise of administrative functions. The vulnerability requires user interaction but no prior authentication or privileges by the attacker. Although no known exploits are reported in the wild, the vulnerability poses a significant risk to the integrity of affected systems. The CVSS score is 6.5, reflecting the ease of exploitation and impact on integrity without affecting confidentiality or availability. European organizations using this software, especially educational institutions, are at risk of unauthorized administrative changes. Mitigation requires implementing CSRF tokens and validating them on all administrative forms, alongside user education to avoid malicious links. Countries with higher adoption of PHPgurukul or similar educational platforms, such as Germany, France, and the UK, are more likely to be affected.

MediumVulnerabilityGermanyFranceItaly+3#cve#cve-2025-70899