Lucene search
+L

6621 matches found

CNNVD
CNNVD
added 2025/07/28 12:00 a.m.9 views

PHPGurukul e-Diary Management System 安全漏洞

The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /edms/change-password.php. No details of the vulnerability are available at this time...

7.5CVSS6.8AI score0.00429EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/07/28 12:00 a.m.9 views

PHPGurukul Car Rental Project 安全漏洞

Car Rental Project is a car rental program. Car Rental Project suffers from a session hijacking vulnerability that stems from the /carrental/update-password.php component not properly terminating a session. No details of the vulnerability are provided at this time...

7.1CVSS6.8AI score0.00322EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/07/28 12:00 a.m.5 views

CVE-2025-50491

Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack...

6.7AI score0.00286EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/07/28 12:00 a.m.10 views

PT-2025-31136 · Phpgurukul · Phpgurukul E-Diary Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul e-Diary Management System version 1 Description: The application suffers from improper session invalidation in the /edms/change-password.php component, which could allow attackers to execute a session hijacking attack...

7.5CVSS6.8AI score0.00429EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2025/07/28 12:00 a.m.6 views

CVE-2025-50489

Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...

7.5CVSS6AI score0.00479EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/07/28 12:00 a.m.21 views

CVE-2025-50493

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack...

0.00315EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/07/28 12:00 a.m.9 views

PT-2025-31133 · Phpgurukul · Phpgurukul Car Washing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Car Washing Management System version 1.0 Description: Improper session invalidation in the /doctor/change-password.php component allows attackers to execute a session hijacking attack. Recommendations: Address the session...

7.5CVSS6.7AI score0.00387EPSS
SaveExploits1References8
Cvelist
Cvelist
added 2025/07/28 12:00 a.m.18 views

CVE-2025-50485

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack...

0.00322EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/07/28 12:00 a.m.12 views

CVE-2025-50488

Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attack...

6.7AI score0.00312EPSS
SaveExploits1References3
CVE
CVE
added 2025/07/28 12:00 a.m.30 views

CVE-2025-50489

CVE-2025-50489 affects the PHPGurukul Student Result Management System v2.0, specifically the /srms/change-password.php component. The issue is improper session invalidation, which enables session hijacking attacks. The CVSS details indicate network access with low attack complexity and no privil...

7.5CVSS6.7AI score0.00479EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2025/07/28 12:00 a.m.38 views

CVE-2025-50484

PHPGurukul Small CRM v3.0 is affected by an improper session invalidation in the /crm/change-password.php component, enabling session hijacking. The CVE-2025-50484 description consistently cites this issue across multiple sources. The vulnerability arises from failure to terminate sessions proper...

7.1CVSS6.7AI score0.00261EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2025/07/28 12:00 a.m.19 views

CVE-2025-50489

Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...

0.00479EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/07/28 12:00 a.m.25 views

CVE-2025-50487

Improper session invalidation in the component /bbdms/change-password.php of PHPGurukul Blood Bank & Donor Management System v2.4 allows attackers to execute a session hijacking attack...

0.00261EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/07/28 12:00 a.m.20 views

CVE-2025-50490

Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...

0.00401EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/07/28 12:00 a.m.8 views

PHPGurukul Car Washing Management System 安全漏洞

Car Washing Management System is a car wash management system. Car Washing Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /doctor/change-password.php, no details of the vulnerability are provided at this time...

7.5CVSS6.9AI score0.00387EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2025/07/28 12:00 a.m.6 views

CVE-2025-50488

Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS6AI score0.00312EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/07/28 12:00 a.m.19 views

CVE-2025-50494

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to execute a session hijacking attack...

0.00387EPSS
SaveExploits1References1
CVE
CVE
added 2025/07/28 12:00 a.m.34 views

CVE-2025-50486

CVE-2025-50486 affects PHPGurukul Car Rental Project, version 3.0. The vulnerability is due to improper session invalidation in the /carrental/update-password.php component, enabling session hijacking. Documented impact indicates potential control of a user session with high confidentiality impac...

7.1CVSS6.8AI score0.00322EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2025/07/28 12:00 a.m.29 views

CVE-2025-50485

CVE-2025-50485 : PHPGurukul Online Course Registration v3.1 exposes an improper session invalidation in the /crm/change-password.php component, enabling session hijacking. The vulnerability is confirmed across multiple sources, describing inadequate session expiration/invalidation as the root cau...

7.1CVSS6.8AI score0.00322EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2025/07/28 12:00 a.m.20 views

CVE-2025-50491

Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack...

0.00286EPSS
SaveExploits0References1
Rows per page
Query Builder