CVE-2023-0641

A vulnerability was found in PHPGurukul Employee Leaves Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file changepassword.php. The manipulation of the argument newpassword/confirmpassword leads to weak password requirements. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-220021 was assigned to this vulnerability.

• CWE-521

• https://github.com/ctflearner/Vulnerability/blob/main/Employee%20Leaves%20Management%20System/ELMS.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.220021Third Party Advisory
• https://vuldb.com/?id.220021Third Party Advisory
• https://github.com/ctflearner/Vulnerability/blob/main/Employee%20Leaves%20Management%20System/ELMS.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.220021Third Party Advisory
• https://vuldb.com/?id.220021Third Party Advisory

Published

Feb 2, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0635Improper Privilege Management vulnerability in ABB Ltd. ASPE…9.8
• CVE-2023-0636Improper Input Validation vulnerability in ABB Ltd. ASPECT®-…9.8
• CVE-2023-0637A vulnerability, which was classified as critical, was found…6.5
• CVE-2023-0638A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10…9.8
• CVE-2023-0639A vulnerability was found in TRENDnet TEW-652BRP 3.04b01 and…6.1
• CVE-2023-0640A vulnerability was found in TRENDnet TEW-652BRP 3.04b01. It…9.8
• CVE-2023-0642Cross-Site Request Forgery (CSRF) in GitHub repository squid…6.5
• CVE-2023-0643Improper Handling of Additional Special Element in GitHub re…6.1
• CVE-2023-0644The Push Notifications for WordPress by PushAssist WordPress…6.1
• CVE-2023-0645An out of bounds read exists in libjxl. An attacker using a …9.1
• CVE-2023-0646A vulnerability classified as critical was found in dst-admi…7.5
• CVE-2023-0647A vulnerability, which was classified as critical, has been …7.5