Cross-Site Request Forgery Vulnerability in phpgurukul Gym Management System
CVE-2024-55271

3.5LOW

Key Information:

Vendor

phpgurukul
Status
Gym Management System
Vendor
CVE Published:
17 February 2026

What is CVE-2024-55271?

A vulnerability in the phpgurukul Gym Management System allows an attacker to exploit the profile update functionality within the User Panel. By crafting a malicious request, an attacker can execute unauthorized actions on behalf of a user without their consent. This vulnerability resides specifically in the /profile.php endpoint, which can lead to undesirable modifications and breaches of user privacy.

References

https://github.com/shoaibalam112/Gym_Management_system
https://github.com/shoaibalam112/CVE-2024-55271/blob/main...

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.