97 matches found
EUVD-2025-14235
Malicious code in bioql PyPI...
EUVD-2025-9728
Malicious code in bioql PyPI...
EUVD-2025-9907
Malicious code in bioql PyPI...
EUVD-2025-9657
Malicious code in bioql PyPI...
EUVD-2025-13344
Malicious code in bioql PyPI...
EUVD-2025-9689
Malicious code in bioql PyPI...
EUVD-2025-9682
Malicious code in bioql PyPI...
EUVD-2025-9675
Malicious code in bioql PyPI...
EUVD-2025-9665
Malicious code in bioql PyPI...
EUVD-2025-22937
Malicious code in bioql PyPI...
e-Diary Management System Session Hijacking Vulnerability
The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /edms/change-password.php. No details of the vulnerability are available at this time...
CVE-2025-50492
Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...
CVE-2025-50492
Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...
CVE-2025-50492
Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...
PT-2025-31136 · Phpgurukul · Phpgurukul E-Diary Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul e-Diary Management System version 1 Description: The application suffers from improper session invalidation in the /edms/change-password.php component, which could allow attackers to execute a session hijacking attack...
CVE-2025-50492
CVE-2025-50492 affects PHPGurukul e-Diary Management System v1, specifically the /edms/change-password.php component. The root cause is improper session invalidation, which can enable a session hijacking attack. Impact is exploitation of user sessions with high availability impact (per CVSS). Rem...
CVE-2022-29004
Diary Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name parameter in search-result.php...
CVE-2025-4509
A vulnerability, which was classified as critical, has been found in PHPGurukul e-Diary Management System 1.0. This issue affects some unknown processing of the file /manage-notes.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit ha...
CVE-2025-4508
A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. This vulnerability affects unknown code of the file /my-profile.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...
CVE-2025-4509
A vulnerability, which was classified as critical, has been found in PHPGurukul e-Diary Management System 1.0. This issue affects some unknown processing of the file /manage-notes.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit ha...