CVE-2023-6766

Summary

CVE-2023-6766 is a newly disclosed vulnerability affecting the PHPGurukul Teacher Subject Allocation Management System version 1.0. An issue was discovered in the Delete Course Handler component's /admin/course.php file, where an unknown function is susceptible to cross-site request forgery (CSRF). The manipulation of the delid argument can be exploited remotely, making this a significant security concern. The vulnerability, also known as VDB-247896, has been made public and may be actively exploited.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.