CVE Details
Basic Information
| Title | PHPGurukul Apartment Visitors Management System HTTP POST Request category.php cross site scripting |
|---|---|
| Type | cve |
| Published | 2025-07-19T12:02:06.810Z |
| Modified | 2025-07-19T12:02:06.810Z |
Product Information
| Vendor | PHPGurukul |
|---|---|
| Product | Apartment Visitors Management System |
| Version | 1.0 |
CVSS Information
| Base Score | 5.1 (MEDIUM) |
|---|---|
| Attack Vector | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P |
AI Analysis
| AI Description | A cross-site scripting (XSS) vulnerability exists in the Apartment Visitors Management System due to improper validation of the ‘categoryname’ parameter in HTTP POST requests. This can allow attackers to inject malicious scripts, potentially leading to session hijacking or unauthorized actions. The vulnerability is remotely exploitable and has been publicly disclosed. |
|---|---|
| AI Severity | Medium |
| AI Vendor | PHPGurukul |
| AI Product | Apartment Visitors Management System |
| AI Version | 1.0 |
| AI Score | 5.1 |
Affected Products
- PHPGurukul Apartment Visitors Management System 1.0
Additional Information
| CWE List | CWE-79, CWE-94 |
|---|---|
| Source | VulDB |
Description
A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /category.php of the component HTTP POST Request Handler. The manipulation of the argument categoryname leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.