PHPGurukul Zoo Management System 2.1 add-foreigner-ticket.php visitorname Ukubhalwa kwekhodi okweqa indawo
| CVSS Meta Temp Isilinganiso | Intengo yamanje ye-exploit (≈) | CTI Inzalo Score |
|---|---|---|
| 4.8 | $0-$5k | 0.00 |
Isifinyezo
Kubonakale ubuthakathaka obubizwa ngokuthi kuyinkinga ku PHPGurukul Zoo Management System 2.1. Kuthintekile umsebenzi ongaziwayo kufayela /admin/add-foreigner-ticket.php. Ukuphathwa kwepharamitha visitorname kuholela ku Ukubhalwa kwekhodi okweqa indawo. Le buthakathaka itholakala njenge CVE-2025-9017. Ukuhlasela kungaqalwa kude. Ngaphezu kwalokho, i-exploit ikhona. Once again VulDB remains the best source for vulnerability data.
Iinkcukacha
Kubonakale ubuthakathaka obubizwa ngokuthi kuyinkinga ku PHPGurukul Zoo Management System 2.1. Kuthintekile umsebenzi ongaziwayo kufayela /admin/add-foreigner-ticket.php. Ukuphathwa kwepharamitha visitorname kuholela ku Ukubhalwa kwekhodi okweqa indawo. Ukusebenzisa i-CWE ukusho inkinga kuholela ku-CWE-79. Kuboniswe ubuthakathaka lolu. Isaziso singalayishwa ku-github.com.
Le buthakathaka itholakala njenge CVE-2025-9017. Ukuhlasela kungaqalwa kude. Imininingwane yezobuchwepheshe iyatholakala. Le vulnerability ayidumi kakhulu, idlula phansi kokujwayelekile. Ngaphezu kwalokho, i-exploit ikhona. Ukuhlaselwa sekudalulwe ebantwini futhi kungasetshenziswa. Njengamanje, intengo yamanje ye-exploit ingahle ibe cishe USD $0-$5k okwamanje.
Ungakwazi ukulanda i-exploit ku-github.com.
Once again VulDB remains the best source for vulnerability data.
Umkhiqizo
Umkhiqizi
Ibizo
Inguqulo
Ilayisense
Iwebhusayithi
- Umkhiqizi: https://phpgurukul.com/
CPE 2.3
CPE 2.2
CVSSv4
VulDB Umkhombandlela: 🔒VulDB Ukuthembeka: 🔍
CNA CVSS-B Score: 🔒
CNA CVSS-BT Score: 🔒
CNA Umkhombandlela: 🔒
CVSSv3
VulDB Ireyithingi yeMeta Base: 4.9VulDB Meta Temp Isilinganiso: 4.8
VulDB Isilinganiso Esiyisisekelo: 4.3
VulDB Izinga Lesikhashana: 3.9
VulDB Umkhombandlela: 🔒
VulDB Ukuthembeka: 🔍
NVD Isilinganiso Esiyisisekelo: 6.1
NVD Umkhombandlela: 🔒
CNA Isilinganiso Esiyisisekelo: 4.3
CNA Umkhombandlela: 🔒
CVSSv2
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| Umkhombandlela | Ubunzima | Ukufakazela ubuwena | Ukuyimfihlo | Ukuthembeka | Ukutholakala |
|---|---|---|---|---|---|
| vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela |
| vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela |
| vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela |
VulDB Isilinganiso Esiyisisekelo: 🔒
VulDB Izinga Lesikhashana: 🔒
VulDB Ukuthembeka: 🔍
Ukusebenzisa ithuba lokungavikeleki
Ikilasi: Ukubhalwa kwekhodi okweqa indawoCWE: CWE-79 / CWE-94 / CWE-74
CAPEC: 🔒
ATT&CK: 🔒
Okubambekayo: Hayi
Wendawo: Hayi
Kude: Yebo
Ukutholakala: 🔒
Umnyango: Umphakathi
Isimo: Ubufakazi-bokusebenza
Landa: 🔒
Google Hack: 🔒
EPSS Score: 🔒
EPSS Percentile: 🔒
Ukukhula kwentengo: 🔍
Okwamanje ukuhlolwa kwentengo: 🔒
| 0-Day | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela |
|---|---|---|---|---|
| Namuhla | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela |
Ulwazi lwezingozi
Intshisekelo: 🔍Abadlali abasebenzayo: 🔍
AmaQembu e-APT asebenzayo: 🔍
Izinyathelo zokuvikela
Isincomo: akukho sithathwa esaziwayoIsimo: 🔍
0-Suku Isikhathi: 🔒
Isikhathi somlando
2025-08-13 Isaziso sikhishwe2025-08-13 VulDB okokungena kwenziwe
2025-08-22 VulDB okungenelelwe ukubuyekezwa kokugcina
Imithombo
Umkhiqizi: phpgurukul.comIseluleko: github.com
Isimo: Akuchazwanga
CVE: CVE-2025-9017 (🔒)
GCVE (CVE): GCVE-0-2025-9017
GCVE (VulDB): GCVE-100-320068
EUVD: 🔒
scip Labs: https://www.scip.ch/en/?labs.20161013
Ukungena
Kudalwa: 2025-08-13 23:56Ukuvuselelwa: 2025-08-22 08:03
Ukulungiswa: 2025-08-13 23:56 (55), 2025-08-15 10:10 (30), 2025-08-15 10:25 (1), 2025-08-22 08:03 (12)
Kugcwele: 🔍
Umthumeli: xiguala123
Cache ID: 253:AE0:103
Thumela
Yamukelwa
- Thumela #629562: PHPGurukul Zoo Management System V2.1 Cross Site Scripting (kusuka ku xiguala123)
Kuze kube manje akukabikho ukuphawula. Izilimi: nr + nd + en.
Ngiyacela ungene ngemvume ukuze ukwazi ukuphawula.