Lucene search
+L

18905 matches found

ATTACKERKB
ATTACKERKB
added 2025/07/28 12:00 a.m.8 views

CVE-2025-50494

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to execute a session hijacking attack...

7.5CVSS6AI score0.0039EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/07/28 12:00 a.m.10 views

PT-2025-31144 · Phpgurukul · Phpgurukul Blood Bank & Donor Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Blood Bank & Donor Management System version 2.4 Description: Improper session invalidation in the component /bbdms/change-password.php allows attackers to execute a session hijacking attack. Recommendations: PHPGurukul Blood Bank ...

7.1CVSS6.6AI score0.00263EPSS
SaveExploits1References8
ATTACKERKB
ATTACKERKB
added 2025/07/28 12:00 a.m.7 views

CVE-2025-50491

Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack...

7.1CVSS6AI score0.00289EPSS
SaveExploits0References4
CVE
CVE
added 2025/07/28 12:00 a.m.30 views

CVE-2025-50492

CVE-2025-50492 affects PHPGurukul e-Diary Management System v1, specifically the /edms/change-password.php component. The root cause is improper session invalidation, which can enable a session hijacking attack. Impact is exploitation of user sessions with high availability impact (per CVSS). Rem...

7.5CVSS6.7AI score0.00432EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/07/28 12:00 a.m.11 views

PT-2025-31141 · Unknown · Phpgurukul Bank Locker Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Bank Locker Management System version 1 Description: Improper session invalidation in the /banker/change-password.php component allows attackers to execute a session hijacking attack. Recommendations: Address the session invalidati...

7.1CVSS6.6AI score0.00289EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2025/07/28 12:00 a.m.7 views

CVE-2025-50487

Improper session invalidation in the component /bbdms/change-password.php of PHPGurukul Blood Bank & Donor Management System v2.4 allows attackers to execute a session hijacking attack...

7.1CVSS6AI score0.00263EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/07/28 12:00 a.m.18 views

PT-2025-31147 · Unknown · Phpgurukul Online Course Registration System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Course Registration version 3.1 Description: Improper session invalidation in the /crm/change-password.php component allows attackers to execute a session hijacking attack. Recommendations: Address the session invalidation...

7.1CVSS6.6AI score0.00325EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/07/28 12:00 a.m.9 views

PHPGurukul Online Course Registration 安全漏洞

Online Course Registration is an online course registration system. A session hijacking vulnerability exists in Online Course Registration, which stems from improper session expiration of the component /crm/change-password.php. No details of the vulnerability are available at this time...

7.1CVSS6.9AI score0.00325EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/07/28 12:00 a.m.5 views

CVE-2025-50486

Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack...

6.8AI score0.00325EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/07/28 12:00 a.m.20 views

CVE-2025-50484

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack...

0.00263EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2025/07/28 12:00 a.m.7 views

CVE-2025-50484

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS6AI score0.00263EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/07/28 12:00 a.m.10 views

PHPGurukul Doctor Appointment Management System 安全漏洞

Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a session hijacking vulnerability that stems from the /doctor/change-password.php component not properly terminating a session. No details of the vulnerability are...

7.5CVSS6.8AI score0.00318EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/07/28 12:00 a.m.6 views

CVE-2025-50487

Improper session invalidation in the component /bbdms/change-password.php of PHPGurukul Blood Bank & Donor Management System v2.4 allows attackers to execute a session hijacking attack...

6.7AI score0.00263EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/07/28 12:00 a.m.9 views

PHPGurukul Online Library Management System 安全漏洞

Online Library Management System is an online library management system. A security vulnerability exists in Online Library Management System, which originates from an improperly disabled session in the component /library/change-password.php, and can be exploited by an attacker to cause a session...

7.1CVSS6.8AI score0.00314EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/07/28 12:00 a.m.17 views

PT-2025-31148 · Unknown · Phpgurukul Car Rental Project

Name of the Vulnerable Software and Affected Versions: PHPGurukul Car Rental Project version 3.0 Description: Improper session invalidation in the /carrental/update-password.php component allows attackers to execute a session hijacking attack. Recommendations: Address the session invalidation iss...

7.1CVSS6.7AI score0.00325EPSS
SaveExploits1References7
CVE
CVE
added 2025/07/28 12:00 a.m.30 views

CVE-2025-50490

CVE-2025-50490 affects PHPGurukul Student Result Management System v2.0, with the vulnerable component /elms/emp-changepassword.php experiencing improper session invalidation that enables session hijacking. The issue is described across multiple sources (Red Hat, NVD, CNVD, CVE List) as a vulnera...

7.5CVSS6.7AI score0.00404EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2025/07/28 12:00 a.m.10 views

PHPGurukul Student Result Management System 安全漏洞

Student Result Management System is a student result management system. Student Result Management System suffers from a session hijacking vulnerability that stems from an improperly disabled session in component /elms/emp-changepassword.php, no details of the vulnerability are available at this...

7.5CVSS6.8AI score0.00404EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/07/28 12:00 a.m.21 views

CVE-2025-50492

Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...

0.00432EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/28 12:00 a.m.8 views

PHPGurukul Student Result Management System 安全漏洞

Student Result Management System is a student result management system. Student Result Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /srms/change-password.php, no details of the vulnerability are available at this...

7.5CVSS6.9AI score0.00483EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/07/28 12:00 a.m.24 views

CVE-2025-50486

Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack...

0.00325EPSS
SaveExploits1References1
Rows per page
Query Builder