Lucene search
+L

8534 matches found

Vulnrichment
Vulnrichment
•added 2025/07/28 12:00 a.m.•12 views

CVE-2025-50493

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack...

6.7AI score0.00318EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/07/28 12:00 a.m.•15 views

PHPGurukul Car Washing Management System 安全漏洞

Car Washing Management System is a car wash management system. Car Washing Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /doctor/change-password.php, no details of the vulnerability are provided at this time...

7.5CVSS6.9AI score0.0039EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/28 12:00 a.m.•7 views

CVE-2025-50492: Improper Input Validation

Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...

7.5CVSS6AI score0.00432EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/07/28 12:00 a.m.•24 views

PT-2025-31148 · Unknown · Phpgurukul Car Rental Project

Name of the Vulnerable Software and Affected Versions: PHPGurukul Car Rental Project version 3.0 Description: Improper session invalidation in the /carrental/update-password.php component allows attackers to execute a session hijacking attack. Recommendations: Address the session invalidation iss...

7.1CVSS6.7AI score0.00325EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2025/07/28 12:00 a.m.•10 views

CVE-2025-50492

Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...

6.7AI score0.00432EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/07/28 12:00 a.m.•35 views

CVE-2025-50493

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack...

0.00318EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/07/28 12:00 a.m.•7 views

CVE-2025-50487

Improper session invalidation in the component /bbdms/change-password.php of PHPGurukul Blood Bank & Donor Management System v2.4 allows attackers to execute a session hijacking attack...

6.7AI score0.00263EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/07/28 12:00 a.m.•26 views

CVE-2025-50494

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to execute a session hijacking attack...

0.0039EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/28 12:00 a.m.•10 views

CVE-2025-50488: Insufficient Session Expiration

Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS6AI score0.00314EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2025/07/28 12:00 a.m.•11 views

CVE-2025-50484

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS6AI score0.00263EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/07/28 12:00 a.m.•21 views

PT-2025-31130 · Phpgurukul · Phpgurukul Doctor Appointment Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Doctor Appointment Management System version 1 Description: Improper session invalidation in the /doctor/change-password.php component allows attackers to execute a session hijacking attack. Recommendations: At the moment, there is...

7.5CVSS6.4AI score0.00318EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/07/28 12:00 a.m.•14 views

PT-2025-31129 · Phpgurukul · Phpgurukul Student Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Result Management System version 2.0 Description: Improper session invalidation in the component /elms/emp-changepassword.php allows attackers to execute a session hijacking attack. Recommendations: Address the session...

7.5CVSS6.7AI score0.00404EPSS
SaveExploits1References8
CVE
CVE
•added 2025/07/28 12:00 a.m.•57 views

CVE-2025-50493

The PHPGurukul Doctor Appointment Management System v1 is vulnerable to a session hijacking attack due to improper session invalidation within the /doctor/change-password.php component. This flaw allows an attacker to potentially hijack active user sessions. As of the current documentation, there...

7.5CVSS6.7AI score0.00318EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/07/28 12:00 a.m.•16 views

PT-2025-31133 · Phpgurukul · Phpgurukul Car Washing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Car Washing Management System version 1.0 Description: Improper session invalidation in the /doctor/change-password.php component allows attackers to execute a session hijacking attack. Recommendations: Address the session...

7.5CVSS6.7AI score0.0039EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/28 12:00 a.m.•6 views

CVE-2025-50491: Insufficient Session Expiration

Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack...

7.1CVSS6AI score0.00289EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/07/28 12:00 a.m.•14 views

PT-2025-31144 · Phpgurukul · Phpgurukul Blood Bank & Donor Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Blood Bank & Donor Management System version 2.4 Description: Improper session invalidation in the component /bbdms/change-password.php allows attackers to execute a session hijacking attack. Recommendations: PHPGurukul Blood Bank ...

7.1CVSS6.6AI score0.00263EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2025/07/28 12:00 a.m.•9 views

CVE-2025-50485

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack...

6.8AI score0.00325EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/07/28 12:00 a.m.•27 views

CVE-2025-50484

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack...

0.00263EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/07/28 12:00 a.m.•8 views

CVE-2025-50491

Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack...

6.7AI score0.00289EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/07/28 12:00 a.m.•29 views

CVE-2025-50485

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack...

0.00325EPSS
SaveExploits1References1
Rows per page
Query Builder