CVE-2026-86215

A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the component Logout Handler. Such manipulation of the argument logout leads to session expiration. It is possible to launch the attack remotely. T...

CVE-2026-86215 Mstfakts College-Management-System Logout server.php session expiration

A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the component Logout Handler. Such manipulation of the argument logout leads to session expiration. It is possible to launch the attack remotely. T...

EUVD-2026-72133

A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the component Logout Handler. Such manipulation of the argument logout leads to session expiration. It is possible to launch the attack remotely. T...

CVE-2026-86215

A session expiration vulnerability exists in the Logout Handler component (file Front-end/server.php) of Mstfakts College-Management-System , a self-hosted college management application on GitHub. Manipulation of the log_out argument allows a low-privileged remote attacker to force session expir...

CVE-2026-86215 Mstfakts College-Management-System Logout server.php session expiration

A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the component Logout Handler. Such manipulation of the argument logout leads to session expiration. It is possible to launch the attack remotely. T...

CVE-2026-86215: Insufficient Session Expiration

A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the component Logout Handler. Such manipulation of the argument logout leads to session expiration. It is possible to launch the attack remotely. T...

PT-2026-86531

A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the component Logout Handler. Such manipulation of the argument log out leads to session expiration. It is possible to launch the attack remotely...

CVE-2026-71981 Cypht < 2.12.2 PHP Object Injection RCE via back_query Parameter

Cypht before 2.12.2 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary operating system commands by supplying a crafted PHP object graph in the backquery GET parameter of the logout handler. Attackers can pass a base64-encoded serialized payload...

CVE-2026-71981 Cypht < 2.12.2 PHP Object Injection RCE via back_query Parameter

Cypht before 2.12.2 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary operating system commands by supplying a crafted PHP object graph in the backquery GET parameter of the logout handler. Attackers can pass a base64-encoded serialized payload...

CVE-2026-71981: Deserialization of Untrusted Data

Cypht before 2.12.2 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary operating system commands by supplying a crafted PHP object graph in the backquery GET parameter of the logout handler. Attackers can pass a base64-encoded serialized payload...

PT-2026-84465

Cypht before 2.12.2 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary operating system commands by supplying a crafted PHP object graph in the back query GET parameter of the logout handler. Attackers can pass a base64-encoded serialized payloa...

CVE-2026-73671

Saurus CMS Community Edition is affected by an unauthenticated open redirect in the logout handling code (classes/port.inc.php). The vulnerability occurs because the url parameter supplied via GET or POST is passed directly to the Location header without domain allowlisting, scheme validation, or...

CVE-2026-73671

Saurus CMS Community Edition contains an unauthenticated open redirect vulnerability in the logout handling code in classes/port.inc.php, where the url parameter supplied via GET or POST is passed directly to the Location header without domain allowlist, scheme validation, or relative path...

EUVD-2026-58111

Saurus CMS Community Edition contains an unauthenticated open redirect vulnerability in the logout handling code in classes/port.inc.php, where the url parameter supplied via GET or POST is passed directly to the Location header without domain allowlist, scheme validation, or relative path...

EUVD-2026-51653

An issue in FeehiCMS v.2.1.1 allows an attacker to escalate privileges via the Session management module, authentication logic, logout handler components...

Improper Authentication

Overview feehi/cms is a Feehi CMS project template. Affected versions of this package are vulnerable to Improper Authentication in the Session management module, authentication logic, and logout handler components. An attacker can gain unauthorized access or escalate privileges by exploiting...

CVE-2026-51953

An issue in FeehiCMS v.2.1.1 allows an attacker to escalate privileges via the Session management module, authentication logic, logout handler components...

CVE-2026-51953

An issue in FeehiCMS v.2.1.1 allows an attacker to escalate privileges via the Session management module, authentication logic, logout handler components...

CVE-2026-51953

The FeehiCMS project template, specifically version v.2.1.1 , is vulnerable to improper authentication and privilege escalation. The root cause lies in flaws within the Session management module , authentication logic , and logout handler components . An attacker can exploit these weaknesses in s...

PT-2026-66863

Name of the Vulnerable Software and Affected Versions FeehiCMS version 2.1.1 Description An issue exists in the Session management module, authentication logic, and logout handler components that allows an attacker to escalate privileges. Recommendations At the moment, there is no information abo...