4 matches found
CVE-2025-50484
Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack...
CVE-2025-50484
Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack...
CVE-2025-50484
Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack...
CVE-2025-50484
PHPGurukul Small CRM v3.0 is vulnerable to a session hijacking attack due to improper session invalidation in the /crm/change-password.php component. This flaw, categorized under CWE-613 (Insufficient Session Expiration) , occurs because the application fails to properly terminate sessions during...