Access Control Vulnerability in PHPGurukul Blood Donor Management System
CVE-2022-38813
8.1HIGH
Key Information:
- Vendor
- CVE Published:
- 25 November 2022
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2022-38813?
The PHPGurukul Blood Donor Management System 1.0 has a significant access control vulnerability where unauthorized users can access the admin/dashboard.php area. This flaw permits attackers to view, modify, and delete user data, including managing blood groups and submitting reports, potentially leading to severe impacts on user privacy and data integrity.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.