CVE-2025-15390
A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /admin/edit-user.php. The manipulation results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Vendor
Product
CWE
Yayın Tarihi
2025-12-31 16:15:42
Güncelleme
2026-02-24 07:17:09
Source Identifier
cna@vuldb.com
KEV Date Added
-
Kategoriler
Referanslar
https://github.com/rsecroot/Small-Customer-Relationship-Management-CRM-in-PHP/blob/main/Broken%20Access%20Control.md
https://phpgurukul.com/
https://vuldb.com/?ctiid.339151
https://vuldb.com/?id.339151
https://vuldb.com/?submit.727430
https://github.com/rsecroot/Small-Customer-Relationship-Management-CRM-in-PHP/blob/main/Broken%20Access%20Control.md