{"id":"CVE-2024-55271","aliases":["EUVD-2024-55435","GHSA-9pq4-hhwq-2hcq"],"status":"published","title":"A Cross-Site Request Forgery (CSRF) vulnerability has been identified in phpgurukul Gym...","description":"A Cross-Site Request Forgery (CSRF) vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint.","severity":{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00154,"percentile":0.04594,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-352"],"published":"2026-02-17T00:00:00Z","modified":"2026-06-17T08:11:04Z","exploits":[{"source":"pocgithub","id":"shoaibalam112/CVE-2024-55271","title":"shoaibalam112/CVE-2024-55271","date":"2024-09-16","url":"https://github.com/shoaibalam112/CVE-2024-55271"}],"products":[{"vendor":"phpgurukul","product":"gym_management_system"}],"references":[{"url":"https://github.com/shoaibalam112/Gym_Management_system","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/shoaibalam112/CVE-2024-55271/blob/main/README.md","tags":["Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-55271"},{"url":"https://github.com/advisories/GHSA-9pq4-hhwq-2hcq"}],"sources":{"cve":[{"id":"CVE-2024-55271","description":"A Cross-Site Request Forgery (CSRF) vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint.","status":"published","published":"2026-02-17T00:00:00Z","modified":"2026-02-17T18:48:24.237Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"adp"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:34:22.153872Z"}],"euvd":[{"id":"EUVD-2024-55435","description":"A Cross-Site Request Forgery (CSRF) vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint.","status":"published","published":"2026-02-17T00:00:00Z","modified":"2026-02-17T18:48:24Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T19:48:37.939014Z"}],"ghsa":[{"id":"GHSA-9pq4-hhwq-2hcq","title":"A Cross-Site Request Forgery (CSRF) vulnerability has been identified in phpgurukul Gym...","description":"A Cross-Site Request Forgery (CSRF) vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint.","status":"published","published":"2026-02-17T18:32:57Z","modified":"2026-02-17T21:32:21Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T15:06:14.396911Z"}],"nvd":[{"id":"CVE-2024-55271","description":"A Cross-Site Request Forgery (CSRF) vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint.","status":"published","published":"2026-02-17T17:21:03.69Z","modified":"2026-06-17T08:11:04.203Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:10:47.444899Z"}]}}