CVE-2024-55058

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-55058
An insecure direct object reference (IDOR) vulnerability was discovered in PHPGurukul Online Birth Certificate System v1.0. This vulnerability resides in the viewid parameter of /user/view-application-detail.php. Authenticated users can exploit this flaw by manipulating the viewid parameter in the URL to access sensitive birth certificate details of other users without proper authorization checks.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/SCR-athif/CVE/tree/main/CVE-2024-55058 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:phpgurukul:online_birth_certificate_system:1.0:*:*:*:*:*:*:*
History

27 Mar 2025, 16:23

Type Values Removed Values Added
First Time Phpgurukul
Phpgurukul online Birth Certificate System
CPE cpe:2.3:a:phpgurukul:online_birth_certificate_system:1.0:*:*:*:*:*:*:*
References () https://github.com/SCR-athif/CVE/tree/main/CVE-2024-55058 - () https://github.com/SCR-athif/CVE/tree/main/CVE-2024-55058 - Exploit, Third Party Advisory
Summary
  • (es) Se descubrió una vulnerabilidad de referencia directa a objeto (IDOR) insegura en PHPGurukul Online Birth Certificate System v1.0. Esta vulnerabilidad reside en el parámetro viewid de /user/view-application-detail.php. Los usuarios autenticados pueden explotar esta falla manipulando el parámetro viewid en la URL para acceder a detalles confidenciales del certificado de nacimiento de otros usuarios sin las verificaciones de autorización adecuadas.

18 Dec 2024, 16:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.3
CWE CWE-706

17 Dec 2024, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-17 21:15

Updated : 2025-03-27 16:23

NVD link : CVE-2024-55058

Mitre link : CVE-2024-55058

CVE.ORG link : CVE-2024-55058

JSON object : View

Products Affected

phpgurukul

  • online_birth_certificate_system
CWE
CWE-706

Use of Incorrectly-Resolved Name or Reference