CVE-2025-45947

PoC —

CVSS 3.1

9.8 critical

EPSS

<1%p53

Published

Apr 28, 2025 (Apr 28, 2025)

Modified

Jul 5, 2026

Description

An issue in phpgurukul Online Banquet Booking System V1.2 allows an attacker to execute arbitrary code via the /obbs/change-password.php file of the My Account - Change Password component

Vendors: phpgurukul
Products: online banquet booking system
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.