Lucene search
+L

8533 matches found

attackerkb
attackerkb
•added 2025/07/28 12:00 a.m.•10 views

CVE-2025-50486

Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS6AI score0.00325EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2025/07/28 12:00 a.m.•10 views

CVE-2025-50489

Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...

7.5CVSS6AI score0.00483EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/07/28 12:00 a.m.•16 views

PHPGurukul Doctor Appointment Management System 安全漏洞

Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a session hijacking vulnerability that stems from the /doctor/change-password.php component not properly terminating a session. No details of the vulnerability are...

7.5CVSS6.8AI score0.00318EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/28 12:00 a.m.•3 views

CVE-2025-50487: Insufficient Session Expiration

Improper session invalidation in the component /bbdms/change-password.php of PHPGurukul Blood Bank & Donor Management System v2.4 allows attackers to execute a session hijacking attack...

7.1CVSS6AI score0.00263EPSS
SaveExploits1References3
CVE
CVE
•added 2025/07/28 12:00 a.m.•65 views

CVE-2025-50491

The PHPGurukul Bank Locker Management System v1 is vulnerable to a session hijacking attack due to improper session invalidation in the /banker/change-password.php component. This flaw allows attackers to potentially seize active user sessions. Remediation involves addressing the session invalida...

7.1CVSS6.7AI score0.00289EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/07/28 12:00 a.m.•18 views

PHPGurukul e-Diary Management System 安全漏洞

The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /edms/change-password.php. No details of the vulnerability are available at this time...

7.5CVSS6.8AI score0.00432EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/07/28 12:00 a.m.•17 views

PT-2025-31141 · Unknown · Phpgurukul Bank Locker Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Bank Locker Management System version 1 Description: Improper session invalidation in the /banker/change-password.php component allows attackers to execute a session hijacking attack. Recommendations: Address the session invalidati...

7.1CVSS6.6AI score0.00289EPSS
SaveExploits0References7
CVE
CVE
•added 2025/07/28 12:00 a.m.•46 views

CVE-2025-50488

The PHPGurukul Online Library Management System v3.0 is affected by a vulnerability involving improper session invalidation in the /library/change-password.php component. This flaw, categorized under CWE-613 (Insufficient Session Expiration), allows an attacker to perform a session hijacking atta...

7.1CVSS6.7AI score0.00314EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2025/07/28 12:00 a.m.•15 views

PHPGurukul Bank Locker Management System 安全漏洞

Bank Locker Management System is a bank locker management system. Bank Locker Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /banker/change-password.php. No detailed vulnerability details are available at this time...

7.1CVSS6.9AI score0.00289EPSS
SaveExploits0References4
CVE
CVE
•added 2025/07/28 12:00 a.m.•49 views

CVE-2025-50489

The PHPGurukul Student Result Management System v2.0 is vulnerable to a session hijacking attack due to improper session invalidation within the /srms/change-password.php component. An attacker could exploit this flaw to hijack active sessions. Remediation involves applying updates to address the...

7.5CVSS6.7AI score0.00483EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/07/28 12:00 a.m.•36 views

CVE-2025-50486

Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack...

0.00325EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2025/07/28 12:00 a.m.•11 views

CVE-2025-50485

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack...

7.1CVSS6AI score0.00325EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/07/28 12:00 a.m.•17 views

CVE-2025-50488

Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attack...

6.7AI score0.00314EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2025/07/28 12:00 a.m.•10 views

CVE-2025-50490

Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...

7.5CVSS6AI score0.00404EPSS
SaveExploits1References4
CVE
CVE
•added 2025/07/28 12:00 a.m.•51 views

CVE-2025-50486

PHPGurukul Car Rental Project v3.0 is vulnerable to a session hijacking attack due to improper session invalidation within the /carrental/update-password.php component. The flaw stems from the application failing to properly terminate sessions during the password update process. To remediate this...

7.1CVSS6.8AI score0.00325EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2025/07/28 12:00 a.m.•44 views

CVE-2025-50492

The PHPGurukul e-Diary Management System v1 is vulnerable to a session hijacking attack due to improper session invalidation within the /edms/change-password.php component. This flaw allows an attacker to hijack active sessions. To remediate this vulnerability, users should apply the latest updat...

7.5CVSS6.7AI score0.00432EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/07/28 12:00 a.m.•5 views

CVE-2025-50484

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack...

6.7AI score0.00263EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/07/28 12:00 a.m.•19 views

PHPGurukul Online Library Management System 安全漏洞

Online Library Management System is an online library management system. A security vulnerability exists in Online Library Management System, which originates from an improperly disabled session in the component /library/change-password.php, and can be exploited by an attacker to cause a session...

7.1CVSS6.8AI score0.00314EPSS
SaveExploits1References4
CVE
CVE
•added 2025/07/28 12:00 a.m.•55 views

CVE-2025-50484

PHPGurukul Small CRM v3.0 is vulnerable to a session hijacking attack due to improper session invalidation in the /crm/change-password.php component. This flaw, categorized under CWE-613 (Insufficient Session Expiration) , occurs because the application fails to properly terminate sessions during...

7.1CVSS6.7AI score0.00263EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/07/28 12:00 a.m.•12 views

CVE-2025-50493

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack...

6.7AI score0.00318EPSS
SaveExploits0References3
Rows per page
Query Builder