CyberRota Analysis
AI-GeneratedThe PHPGurukul Blood Donor Management System 1.0 contains a vulnerability in the Login_Model.php file that allows for the cleartext storage of sensitive information, such as passwords and email addresses, on disk. While the attack requires a high level of complexity and is difficult to execute, the public availability of the exploit increases the risk of potential attacks. Organizations using this system should prioritize addressing this vulnerability to mitigate the risk of data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in PHPGurukul Blood Donor Management System 1.0. Affected by this issue is some unknown functionality of the file application/models/admin/Login_Model.php. This manipulation of the argument password/email/currentpassword/dbcurrentpwd/newpassword causes cleartext storage in a file or on disk. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The exploit has been made available to the public and could be used for attacks.