686 matches found
CVE-2025-50484
Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack...
CVE-2025-50493
The PHPGurukul Doctor Appointment Management System v1 is vulnerable to a session hijacking attack due to improper session invalidation within the /doctor/change-password.php component. This flaw allows an attacker to potentially hijack active user sessions. As of the current documentation, there...
CVE-2025-50488
The PHPGurukul Online Library Management System v3.0 is affected by a vulnerability involving improper session invalidation in the /library/change-password.php component. This flaw, categorized under CWE-613 (Insufficient Session Expiration), allows an attacker to perform a session hijacking atta...
CVE-2025-50492
Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...
CVE-2025-50492: Improper Input Validation
Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...
CVE-2025-50493
Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack...
CVE-2025-50484
Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack...
CVE-2025-50486
Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack...
CVE-2025-50493
Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack...
PT-2025-31135 · Phpgurukul · Phpgurukul Student Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Result Management System version 2.0 Description: The application suffers from improper session invalidation within the /srms/change-password.php component. This flaw enables attackers to perform session hijacking...
CVE-2025-50492
Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...
CVE-2025-50486
Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack...
CVE-2025-50488
Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attack...
CVE-2025-50494
Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to execute a session hijacking attack...
CVE-2025-50487
The PHPGurukul Blood Bank & Donor Management System v2.4 is vulnerable to a session hijacking attack due to improper session invalidation within the /bbdms/change-password.php component. This vulnerability allows an attacker to take over a user session. To remediate this, it is recommended to ens...
PT-2025-31129 · Phpgurukul · Phpgurukul Student Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Result Management System version 2.0 Description: Improper session invalidation in the component /elms/emp-changepassword.php allows attackers to execute a session hijacking attack. Recommendations: Address the session...
PHPGurukul Bank Locker Management System 安全漏洞
Bank Locker Management System is a bank locker management system. Bank Locker Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /banker/change-password.php. No detailed vulnerability details are available at this time...
PT-2025-31132 · Phpgurukul · Phpgurukul Online Library Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Library Management System version 3.0 Description: The software contains an improper session invalidation issue in the /library/change-password.php component. This allows attackers to execute a session hijacking attack...