Lucene search
+L

189 matches found

CNVD
CNVD
added 2025/08/01 12:00 a.m.16 views

Car Washing Management System Session Hijacking Vulnerability

Car Washing Management System is a car wash management system. Car Washing Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /doctor/change-password.php, no details of the vulnerability are provided at this time...

7.5CVSS6.9AI score0.0039EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/07/30 12:00 a.m.16 views

e-Diary Management System Session Hijacking Vulnerability

The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /edms/change-password.php. No details of the vulnerability are available at this time...

7.5CVSS6.9AI score0.00432EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/28 6:15 p.m.11 views

CVE-2025-50491

Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack...

7.1CVSS5.8AI score0.00289EPSS
SaveExploits0References3
OSV
OSV
added 2025/07/28 6:15 p.m.32 views

CVE-2025-50488

Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS5.8AI score0.00314EPSS
SaveExploits1References3
OSV
OSV
added 2025/07/28 5:15 p.m.9 views

CVE-2025-50494

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to execute a session hijacking attack...

7.5CVSS5.8AI score0.0039EPSS
SaveExploits1References3
OSV
OSV
added 2025/07/28 5:15 p.m.11 views

CVE-2025-50493

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack...

7.5CVSS5.8AI score0.00318EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/07/28 12:00 a.m.4 views

CVE-2025-50489

Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...

6.7AI score0.00483EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2025/07/28 12:00 a.m.8 views

CVE-2025-50494

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to execute a session hijacking attack...

7.5CVSS6AI score0.0039EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2025/07/28 12:00 a.m.7 views

CVE-2025-50487

Improper session invalidation in the component /bbdms/change-password.php of PHPGurukul Blood Bank & Donor Management System v2.4 allows attackers to execute a session hijacking attack...

7.1CVSS6AI score0.00263EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2025/07/28 12:00 a.m.11 views

CVE-2025-50492

Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...

7.5CVSS6AI score0.00432EPSS
SaveExploits0References4
CVE
CVE
added 2025/07/28 12:00 a.m.43 views

CVE-2025-50493

Summary: CVE-2025-50493 affects PHPGurukul Doctor Appointment Management System v1. The vulnerability is in the /doctor/change-password.php component where improper session invalidation can lead to a session hijacking attack. Likely impact is high (CVSS v3.1: 7.5, HIGH) with network-based access ...

7.5CVSS6.7AI score0.00318EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/07/28 12:00 a.m.6 views

CVE-2025-50486

Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS6AI score0.00325EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2025/07/28 12:00 a.m.6 views

CVE-2025-50493

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack...

7.5CVSS6AI score0.00318EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/07/28 12:00 a.m.11 views

PHPGurukul Bank Locker Management System 安全漏洞

Bank Locker Management System is a bank locker management system. Bank Locker Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /banker/change-password.php. No detailed vulnerability details are available at this time...

7.1CVSS6.9AI score0.00289EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/07/28 12:00 a.m.10 views

PHPGurukul Car Rental Project 安全漏洞

Car Rental Project is a car rental program. Car Rental Project suffers from a session hijacking vulnerability that stems from the /carrental/update-password.php component not properly terminating a session. No details of the vulnerability are provided at this time...

7.1CVSS6.8AI score0.00325EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/07/28 12:00 a.m.8 views

PHPGurukul Car Washing Management System 安全漏洞

Car Washing Management System is a car wash management system. Car Washing Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /doctor/change-password.php, no details of the vulnerability are provided at this time...

7.5CVSS6.9AI score0.0039EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2025/07/28 12:00 a.m.6 views

CVE-2025-50490

Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...

7.5CVSS6AI score0.00404EPSS
SaveExploits1References4
Veracode
Veracode
added 2025/06/26 6:37 p.m.14 views

Session Fixation

Moodle is vulnerable to Session Fixation. The vulnerability is due to improper session management and unauthenticated access to the sesskey parameter, which can be reused in the OAuth2 login flow, allowing attackers to hijack user sessions...

4.2CVSS6.2AI score0.00295EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2025/06/20 3:15 p.m.11 views

CVE-2025-3319

IBM Spectrum Protect Server 8.1 through 8.1.26 could allow attacker to bypass authentication due to improper session authentication which can result in access to unauthorized resources...

9.8CVSS5.8AI score0.00322EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/06/17 12:00 a.m.15 views

The vulnerability of the web interfaces of IBM OpenPages and IBM OpenPages with Watson allows a hacker to intercept user sessions.

The vulnerability of the IBM OpenPages and IBM OpenPages with Watson web interfaces relates to improper session management. Exploiting this vulnerability can allow a malicious actor to intercept a user’s session...

4.3CVSS5.5AI score0.00247EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder