6594 matches found
CVE-2025-50492
Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...
PHPGurukul Bank Locker Management System 安全漏洞
Bank Locker Management System is a bank locker management system. Bank Locker Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /banker/change-password.php. No detailed vulnerability details are available at this time...
CVE-2025-50490
Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...
PT-2025-31129 · Phpgurukul · Phpgurukul Student Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Result Management System version 2.0 Description: Improper session invalidation in the component /elms/emp-changepassword.php allows attackers to execute a session hijacking attack. Recommendations: Address the session...
CVE-2025-50488
Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attack...
PT-2025-31132 · Phpgurukul · Phpgurukul Online Library Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Library Management System version 3.0 Description: The software contains an improper session invalidation issue in the /library/change-password.php component. This allows attackers to execute a session hijacking attack...
PT-2025-31135 · Phpgurukul · Phpgurukul Student Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Result Management System version 2.0 Description: The application suffers from improper session invalidation within the /srms/change-password.php component. This flaw enables attackers to perform session hijacking...
PHPGurukul Student Result Management System 安全漏洞
Student Result Management System is a student result management system. Student Result Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /srms/change-password.php, no details of the vulnerability are available at this...
PHPGurukul Blood Bank & Donor Management System 安全漏洞
PHPGurukul Blood Bank & Donor Management System is a blood bank and donor management system from PHPGurukul. A security vulnerability exists in PHPGurukul Blood Bank & Donor Management System version v2.4, which stems from an improperly invalidated session in the component...
CVE-2025-50493
Summary: CVE-2025-50493 affects PHPGurukul Doctor Appointment Management System v1. The vulnerability is in the /doctor/change-password.php component where improper session invalidation can lead to a session hijacking attack. Likely impact is high (CVSS v3.1: 7.5, HIGH) with network-based access ...
CVE-2025-50488
CVE-2025-50488 affects the PHPGurukul Online Library Management System v3.0 due to an improper session invalidation flaw in the /library/change-password.php component, enabling session hijacking. The incident is confirmed across multiple sources (NVD, Red Hat, CNVD, etc.) with the CVSSv3.1 base s...
CVE-2025-50487
CVE-2025-50487 affects PHPGurukul Blood Bank & Donor Management System v2.4. The vulnerability resides in the change-password.php component (/bbdms/change-password.php) due to improper session invalidation, enabling session hijacking. The CVSS 3.1 base score is 7.1 (High) with network attack vect...
PHPGurukul Car Rental Project 安全漏洞
Car Rental Project is a car rental program. Car Rental Project suffers from a session hijacking vulnerability that stems from the /carrental/update-password.php component not properly terminating a session. No details of the vulnerability are provided at this time...
CVE-2025-50488
Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attack...
PHPGurukul e-Diary Management System 安全漏洞
The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /edms/change-password.php. No details of the vulnerability are available at this time...
CVE-2025-50490
Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...
PHPGurukul Small CRM 安全漏洞
Small CRM is a customer relationship management system. Small CRM suffers from a session hijacking vulnerability that stems from the /crm/change-password.php component not terminating a session properly. No details of the vulnerability are available at this time...
PT-2025-31136 · Phpgurukul · Phpgurukul E-Diary Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul e-Diary Management System version 1 Description: The application suffers from improper session invalidation in the /edms/change-password.php component, which could allow attackers to execute a session hijacking attack...