{"id":"CVE-2025-6284","state":"PUBLISHED","title":"PHPGurukul Car Rental Portal cross-site request forgery","description":"A vulnerability was found in PHPGurukul Car Rental Portal 3.0. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.","publishedAt":"2025-06-19T22:31:11.482Z","updatedAt":"2025-06-23T19:29:37.412Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["PHPGurukul Car Rental Portal"],"affected":[{"vendor":"PHPGurukul","product":"Car Rental Portal","versions":[{"version":"3.0","status":"affected"}]}],"references":["https://vuldb.com/?id.313288","https://vuldb.com/?ctiid.313288","https://vuldb.com/?submit.593775","https://medium.com/@kkfavas481/csrf-in-car-rental-portal-b202b3f2a4f6","https://phpgurukul.com/"],"weaknesses":["CWE-352","CWE-862"],"ingestedAt":"2026-10-29T20:10:04.440Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/6xxx/CVE-2025-6284.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-6284","state":"PUBLISHED","datePublished":"2025-06-19T22:31:11.482Z","dateUpdated":"2025-06-23T19:29:37.412Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2025-06-19T07:12:59.315Z"},"containers":{"cna":{"title":"PHPGurukul Car Rental Portal cross-site request forgery","descriptions":[{"lang":"en","value":"A vulnerability was found in PHPGurukul Car Rental Portal 3.0. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used."},{"lang":"de","value":"In PHPGurukul Car Rental Portal 3.0 wurde eine Schwachstelle ausgemacht. Sie wurde als problematisch eingestuft. Dabei geht es um eine nicht genauer bekannte Funktion. Durch Manipulieren mit unbekannten Daten kann eine cross-site request forgery-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung."}],"affected":[{"vendor":"PHPGurukul","product":"Car Rental Portal","versions":[{"version":"3.0","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.313288","name":"VDB-313288 | PHPGurukul Car Rental Portal cross-site request forgery","tags":["vdb-entry"]},{"url":"https://vuldb.com/?ctiid.313288","name":"VDB-313288 | CTI Indicators (IOB, IOC)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.593775","name":"Submit #593775 | PHPGurukul  Car Rental Management System 3.0 Cross Site  Request Forgery (CSRF)","tags":["third-party-advisory"]},{"url":"https://medium.com/@kkfavas481/csrf-in-car-rental-portal-b202b3f2a4f6","tags":["exploit"]},{"url":"https://phpgurukul.com/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":4.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":4.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":5,"vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-352","type":"CWE","lang":"en","description":"Cross-Site Request Forgery"}]},{"descriptions":[{"cweId":"CWE-862","type":"CWE","lang":"en","description":"Missing Authorization"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2025-06-19T22:31:11.482Z"},"timeline":[{"time":"2025-06-19T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-06-19T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-06-19T09:18:15.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"MUHAMMED FAVAS (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://medium.com/@kkfavas481/csrf-in-car-rental-portal-b202b3f2a4f6","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-06-23T16:16:00.598636Z","id":"CVE-2025-6284","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-06-23T19:29:37.412Z"}}]}}}