18896 matches found
CVE-2025-50493
Summary: CVE-2025-50493 affects PHPGurukul Doctor Appointment Management System v1. The vulnerability is in the /doctor/change-password.php component where improper session invalidation can lead to a session hijacking attack. Likely impact is high (CVSS v3.1: 7.5, HIGH) with network-based access ...
CVE-2025-50492
Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...
CVE-2025-50486
Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack...
PT-2025-31135 · Phpgurukul · Phpgurukul Student Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Result Management System version 2.0 Description: The application suffers from improper session invalidation within the /srms/change-password.php component. This flaw enables attackers to perform session hijacking...
PHPGurukul Bank Locker Management System 安全漏洞
Bank Locker Management System is a bank locker management system. Bank Locker Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /banker/change-password.php. No detailed vulnerability details are available at this time...
CVE-2025-50492
Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...
CVE-2025-50487
CVE-2025-50487 affects PHPGurukul Blood Bank & Donor Management System v2.4. The vulnerability resides in the change-password.php component (/bbdms/change-password.php) due to improper session invalidation, enabling session hijacking. The CVSS 3.1 base score is 7.1 (High) with network attack vect...
PT-2025-31131 · Microsoft · Windows 11 For Arm64
Name of the Vulnerable Software and Affected Versions: Windows 11 for ARM64 CPU architecture versions prior to 24H2 Description: This issue involves DLL hijacking of all PE32 executables when run on Windows for ARM64 CPU architecture. An attacker can execute code by placing a malicious DLL in the...
CVE-2025-50490
Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...
CVE-2025-50490
Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...
PHPGurukul Car Washing Management System 安全漏洞
Car Washing Management System is a car wash management system. Car Washing Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /doctor/change-password.php, no details of the vulnerability are provided at this time...
CVE-2025-50487
Improper session invalidation in the component /bbdms/change-password.php of PHPGurukul Blood Bank & Donor Management System v2.4 allows attackers to execute a session hijacking attack...
PHPGurukul Car Rental Project 安全漏洞
Car Rental Project is a car rental program. Car Rental Project suffers from a session hijacking vulnerability that stems from the /carrental/update-password.php component not properly terminating a session. No details of the vulnerability are provided at this time...
CVE-2025-50489
Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...
CVE-2025-50486
CVE-2025-50486 affects PHPGurukul Car Rental Project, version 3.0. The vulnerability is due to improper session invalidation in the /carrental/update-password.php component, enabling session hijacking. Documented impact indicates potential control of a user session with high confidentiality impac...
CVE-2025-50484
PHPGurukul Small CRM v3.0 is affected by an improper session invalidation in the /crm/change-password.php component, enabling session hijacking. The CVE-2025-50484 description consistently cites this issue across multiple sources. The vulnerability arises from failure to terminate sessions proper...
PT-2025-31143 · Phpgurukul · Phpgurukul Small Crm
Name of the Vulnerable Software and Affected Versions: PHPGurukul Small CRM version 3.0 Description: Improper session invalidation in the /crm/change-password.php component allows attackers to execute a session hijacking attack. Recommendations: Update to a newer version that contains a fix for...
CVE-2025-50489
CVE-2025-50489 affects the PHPGurukul Student Result Management System v2.0, specifically the /srms/change-password.php component. The issue is improper session invalidation, which enables session hijacking attacks. The CVSS details indicate network access with low attack complexity and no privil...
PHPGurukul Small CRM 安全漏洞
Small CRM is a customer relationship management system. Small CRM suffers from a session hijacking vulnerability that stems from the /crm/change-password.php component not terminating a session properly. No details of the vulnerability are available at this time...