PHPGurukul Car Rental Project 安全漏洞

Car Rental Project is a car rental program. Car Rental Project suffers from a session hijacking vulnerability that stems from the /carrental/update-password.php component not properly terminating a session. No details of the vulnerability are provided at this time...

Improper Session Termination

umbraco.cms is vulnerable to Improper Session Termination. The vulnerability is due to the server session not being fully terminated during an explicit sign-out, which could allow unauthorized access...

PT-2023-8698 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla affected versions not specified Description: The issue is related to the improper termination of existing user sessions when a user's MFA methods have been modified, allowing a remote attacker to access confidential data. Additionally,...

CVE-2021-25966

In “Orchard core CMS” application, versions 1.0.0-beta1-3383 to 1.0.0 are vulnerable to an improper session termination after password change. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even aft...

Session fixation

In “Orchard core CMS” application, versions 1.0.0-beta1-3383 to 1.0.0 are vulnerable to an improper session termination after password change. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even aft...

CVE-2021-25966 Orchard Core CMS - Improper Session Termination after Password Change

In “Orchard core CMS” application, versions 1.0.0-beta1-3383 to 1.0.0 are vulnerable to an improper session termination after password change. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even aft...

CVE-2021-25966

CVE-2021-25966 affects Orchard Core CMS: versions 1.0.0-beta1-3383 to 1.0.0 are vulnerable to an improper session termination after password change, allowing a user who was already logged in to retain access even after the password is changed. The connected sources provide explicit details on aff...