Lucene search
+L

1238 matches found

CNVD
CNVD
added 2025/08/01 12:0 a.m.6 views

Student Result Management System /elms/emp-changepassword.php Component Session Hijacking Vulnerability

Student Result Management System is a student result management system. Student Result Management System suffers from a session hijacking vulnerability that stems from an improperly disabled session in component /elms/emp-changepassword.php, no details of the vulnerability are available at this...

7.5CVSS6.9AI score0.00404EPSS
Exploits1References1
CISA
CISA
added 2025/07/31 12:0 p.m.3 views

Thorium Platform Public Availability

Today, CISA, in partnership with Sandia National Laboratories, announced the public availability of Thoriumlink is external, a scalable and distributed platform for automated file analysis and result aggregation. Thorium enhances cybersecurity teams' capabilities by automating analysis workflows...

7.1AI score
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/07/30 12:59 a.m.11 views

CVE-2025-50490

Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...

7.5CVSS7.4AI score0.00404EPSS
Exploits1References1
NVD
NVD
added 2025/07/28 6:15 p.m.6 views

CVE-2025-50489

Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...

7.5CVSS0.00479EPSS
Exploits1References1
OSV
OSV
added 2025/07/28 6:15 p.m.7 views

CVE-2025-50489

Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...

7.5CVSS5.8AI score0.00479EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2025/07/28 12:0 a.m.3 views

CVE-2025-50489

Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...

7.5CVSS6AI score0.00479EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/07/28 12:0 a.m.5 views

PHPGurukul Student Result Management System 安全漏洞

Student Result Management System is a student result management system. Student Result Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /srms/change-password.php, no details of the vulnerability are available at this...

7.5CVSS6.9AI score0.00479EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/07/28 12:0 a.m.7 views

PT-2025-31129 · Phpgurukul · Phpgurukul Student Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Result Management System version 2.0 Description: Improper session invalidation in the component /elms/emp-changepassword.php allows attackers to execute a session hijacking attack. Recommendations: Address the session...

7.5CVSS6.7AI score0.00404EPSS
Exploits1References8
CNVD
CNVD
added 2025/07/21 12:0 a.m.23 views

Online Fire Reporting System bwdates-report-result.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of the fromdate/todate parameter in the file /admin/bwdates-report-result.php for externally entered SQL statements...

8.8CVSS7.1AI score0.00318EPSS
Exploits1References1
OSV
OSV
added 2025/07/16 4:46 p.m.28 views

DRUPAL-CONTRIB-2025-091

This module enables you to analyze the content that you're authoring for a website. It shows you a preview of what a search result might look like. The module doesn't sufficiently escape the metadata from content while rendering the preview, opening up the possibility of a XSS attack. This...

6.1CVSS6.2AI score0.00227EPSS
Exploits0References1
OSV
OSV
added 2025/07/13 5:15 p.m.8 views

CVE-2025-7534

A vulnerability was found in PHPGurukul Student Result Management System 2.0. It has been classified as critical. Affected is an unknown function of the file /notice-details.php of the component GET Parameter Handler. The manipulation of the argument nid leads to sql injection. It is possible to...

9.8CVSS5.7AI score0.00448EPSS
Exploits2References5
NVD
NVD
added 2025/07/13 5:15 p.m.8 views

CVE-2025-7534

A vulnerability was found in PHPGurukul Student Result Management System 2.0. It has been classified as critical. Affected is an unknown function of the file /notice-details.php of the component GET Parameter Handler. The manipulation of the argument nid leads to sql injection. It is possible to...

9.8CVSS0.00448EPSS
Exploits2References5
Vulnrichment
Vulnrichment
added 2025/07/13 5:2 p.m.4 views

CVE-2025-7534 PHPGurukul Student Result Management System GET Parameter notice-details.php sql injection

A vulnerability was found in PHPGurukul Student Result Management System 2.0. It has been classified as critical. Affected is an unknown function of the file /notice-details.php of the component GET Parameter Handler. The manipulation of the argument nid leads to sql injection. It is possible to...

7.5CVSS7.6AI score0.00448EPSS
Exploits2References5
Cvelist
Cvelist
added 2025/07/13 5:2 p.m.14 views

CVE-2025-7534 PHPGurukul Student Result Management System GET Parameter notice-details.php sql injection

A vulnerability was found in PHPGurukul Student Result Management System 2.0. It has been classified as critical. Affected is an unknown function of the file /notice-details.php of the component GET Parameter Handler. The manipulation of the argument nid leads to sql injection. It is possible to...

7.5CVSS0.00448EPSS
Exploits2References5
CVE
CVE
added 2025/07/13 5:2 p.m.35 views

CVE-2025-7534

CVE-2025-7534 affects PHPGurukul Student Result Management System 2.0, specifically the GET Parameter Handler in /notice-details.php where the nid parameter is not properly sanitized, allowing SQL injection. The vulnerability enables remote exploitation and has had exploits disclosed publicly. Mu...

9.8CVSS7.6AI score0.00448EPSS
Exploits2References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/07/12 12:0 a.m.12 views

PT-2025-29339 · Phpgurukul · Phpgurukul Student Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Result Management System version 2.0 Description: A critical issue exists in PHPGurukul Student Result Management System 2.0. The vulnerability is due to a SQL injection flaw within the GET Parameter Handler component,...

9.8CVSS7.3AI score0.00448EPSS
Exploits2References11
Microsoft CVE
Microsoft CVE
added 2025/07/11 7:0 a.m.4 views

pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result

...

5.5CVSS7.6AI score0.00229EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2025/07/10 11:22 p.m.6 views

SUSE CVE-2025-38314

In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Fix result size returned for the admin command completion The result size returned by virtiopciadmindevpartsget is 8 bytes larger than the actual result data size. This occurs because the resultsgsize field of the...

5.5CVSS6.7AI score0.0012EPSS
Exploits0References3
NVD
NVD
added 2025/07/10 8:15 a.m.6 views

CVE-2025-38314

In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Fix result size returned for the admin command completion The result size returned by virtiopciadmindevpartsget is 8 bytes larger than the actual result data size. This occurs because the resultsgsize field of the...

5.5CVSS0.0012EPSS
Exploits0References2
OSV
OSV
added 2025/07/10 8:15 a.m.6 views

UBUNTU-CVE-2025-38314

In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Fix result size returned for the admin command completion The result size returned by virtiopciadmindevpartsget is 8 bytes larger than the actual result data size. This occurs because the resultsgsize field of the...

5.5CVSS6AI score0.0012EPSS
Exploits0References12
Rows per page
Query Builder