Lucene search
+L

711 matches found

OSV
OSV
•added 2025/07/28 6:15 p.m.•14 views

CVE-2025-50491

Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack...

7.1CVSS5.8AI score0.00289EPSS
SaveExploits0References3
NVD
NVD
•added 2025/07/28 6:15 p.m.•17 views

CVE-2025-50492

Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...

7.5CVSS0.00432EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/28 6:15 p.m.•16 views

CVE-2025-50491

Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack...

7.1CVSS0.00289EPSS
SaveExploits0References1
OSV
OSV
•added 2025/07/28 6:15 p.m.•36 views

CVE-2025-50488

Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS5.8AI score0.00314EPSS
SaveExploits1References3
NVD
NVD
•added 2025/07/28 6:15 p.m.•24 views

CVE-2025-50488

Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS0.00314EPSS
SaveExploits1References1
NVD
NVD
•added 2025/07/28 6:15 p.m.•14 views

CVE-2025-50489

Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...

7.5CVSS0.00483EPSS
SaveExploits1References1
OSV
OSV
•added 2025/07/28 5:15 p.m.•18 views

CVE-2025-50493

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack...

7.5CVSS5.8AI score0.00318EPSS
SaveExploits0References3
OSV
OSV
•added 2025/07/28 5:15 p.m.•15 views

CVE-2025-50494

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to execute a session hijacking attack...

7.5CVSS5.8AI score0.0039EPSS
SaveExploits1References3
OSV
OSV
•added 2025/07/28 5:15 p.m.•17 views

CVE-2025-50490

Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...

7.5CVSS5.8AI score0.00404EPSS
SaveExploits1References3
NVD
NVD
•added 2025/07/28 5:15 p.m.•16 views

CVE-2025-50494

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to execute a session hijacking attack...

7.5CVSS0.0039EPSS
SaveExploits1References1
NVD
NVD
•added 2025/07/28 5:15 p.m.•19 views

CVE-2025-50493

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack...

7.5CVSS0.00318EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/07/28 12:00 a.m.•27 views

CVE-2025-50490

Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...

0.00404EPSS
SaveExploits1References1
CVE
CVE
•added 2025/07/28 12:00 a.m.•43 views

CVE-2025-50490

The PHPGurukul Student Result Management System v2.0 is vulnerable to a session hijacking attack due to improper session invalidation in the /elms/emp-changepassword.php component. This flaw allows attackers to hijack active sessions, potentially gaining unauthorized access to the system. While s...

7.5CVSS6.7AI score0.00404EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/07/28 12:00 a.m.•25 views

CVE-2025-50494

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to execute a session hijacking attack...

0.0039EPSS
SaveExploits1References1
CVE
CVE
•added 2025/07/28 12:00 a.m.•46 views

CVE-2025-50494

The PHPGurukul Car Washing Management System v1.0 is vulnerable to a session hijacking attack due to improper session invalidation in the /doctor/change-password.php component. Attackers can exploit this flaw to take over active sessions. Remediation involves addressing the session invalidation l...

7.5CVSS6.7AI score0.0039EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/07/28 12:00 a.m.•13 views

PT-2025-31129 · Phpgurukul · Phpgurukul Student Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Result Management System version 2.0 Description: Improper session invalidation in the component /elms/emp-changepassword.php allows attackers to execute a session hijacking attack. Recommendations: Address the session...

7.5CVSS6.7AI score0.00404EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2025/07/28 12:00 a.m.•29 views

CVE-2025-50488

Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attack...

0.00314EPSS
SaveExploits1References1
CVE
CVE
•added 2025/07/28 12:00 a.m.•40 views

CVE-2025-50488

The PHPGurukul Online Library Management System v3.0 is affected by a vulnerability involving improper session invalidation in the /library/change-password.php component. This flaw, categorized under CWE-613 (Insufficient Session Expiration), allows an attacker to perform a session hijacking atta...

7.1CVSS6.7AI score0.00314EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/07/28 12:00 a.m.•27 views

CVE-2025-50489

Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...

0.00483EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/07/28 12:00 a.m.•26 views

CVE-2025-50491

Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack...

0.00289EPSS
SaveExploits0References1
Rows per page
Query Builder