| 제목 | PHPGurukul Online Course Registration v3.1 Missing Authorization |
|---|
| 설명 | A critical vulnerability has been found in PHP Gurukul Online Course Registration System v3.1 where the authorization mechanism fails to verify user roles before serving administrative content. The application only checks if a user is authenticated but does not verify their authorization level.
The vulnerability exists in the session management implementation. The login process (index.php) creates session variables but omits role assignment:
$_SESSION['login']=$_POST['regno'];
$_SESSION['id']=$num['studentRegno'];
$_SESSION['sname']=$num['studentName'];
// Missing: $_SESSION['role']=$num['role'];
Any authenticated student can access administrative functions by directly navigating to admin URLs (e.g., /onlinecourse/admin/user-log.php, /onlinecourse/admin/manage-users.php) without role verification. This allows privilege escalation from student to administrator.
An authenticated attacker with student privileges can gain complete administrative access, view and modify all user data, manage courses, escalate privileges, and compromise the entire system.
Related Vulnerability: This follows the same pattern as CVE-2025-15390 ( VDB-339151) affecting the CRM Application from the same vendor. Both products share identical vulnerable code patterns but are separate applications requiring independent fixes.
|
|---|
| 원천 | ⚠️ https://github.com/rsecroot/Online-Course-Registration/blob/main/Broken%20Access%20Control.md |
|---|
| 사용자 | hackerfactory (UID 85869) |
|---|
| 제출 | 2025. 12. 31. PM 04:50 (10 개월 ago) |
|---|
| 모더레이션 | 2026. 01. 01. AM 09:46 (17 hours later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 339326 [PHPGurukul Online Course Registration 까지 3.1 권한 상승] |
|---|
| 포인트들 | 20 |
|---|