CVE-2025-15406
PUBLISHED 1/1/2026 1af790b2-7ee1-4545-860a-a788eba489b5
Technical Description
A flaw has been found in PHPGurukul Online Course Registration up to 3.1. This affects an unknown function. This manipulation causes missing authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Affected Products
PHPGurukul
Online Course Registration
3.03.1
References
https://vuldb.com/?id.339326
VDB-339326 | PHPGurukul Online Course Registration authorization
https://vuldb.com/?ctiid.339326
VDB-339326 | CTI Indicators (IOB, IOC)
https://vuldb.com/?submit.728354
Submit #728354 | PHPGurukul Online Course Registration v3.1 Missing Authorization
https://github.com/rsecroot/Online-Course-Registration/blob/main/Broken%20Access%20Control.md
External Link
https://phpgurukul.com/
External Link
Impact Analysis
Attack Vector Network
Attack Complexity Low
Privileges Required None