CVE-2025-50489

The PHPGurukul Student Result Management System v2.0 is vulnerable to a session hijacking attack due to improper session invalidation within the /srms/change-password.php component. An attacker could exploit this flaw to hijack active sessions. Remediation involves applying updates to address the...

CVE-2025-50491

The PHPGurukul Bank Locker Management System v1 is vulnerable to a session hijacking attack due to improper session invalidation in the /banker/change-password.php component. This flaw allows attackers to potentially seize active user sessions. Remediation involves addressing the session invalida...

CVE-2025-50493

The PHPGurukul Doctor Appointment Management System v1 is vulnerable to a session hijacking attack due to improper session invalidation within the /doctor/change-password.php component. This flaw allows an attacker to potentially hijack active user sessions. As of the current documentation, there...

CVE-2025-50484

PHPGurukul Small CRM v3.0 is vulnerable to a session hijacking attack due to improper session invalidation in the /crm/change-password.php component. This flaw, categorized under CWE-613 (Insufficient Session Expiration) , occurs because the application fails to properly terminate sessions during...

CVE-2025-50488

The PHPGurukul Online Library Management System v3.0 is affected by a vulnerability involving improper session invalidation in the /library/change-password.php component. This flaw, categorized under CWE-613 (Insufficient Session Expiration), allows an attacker to perform a session hijacking atta...

CVE-2025-50492

The PHPGurukul e-Diary Management System v1 is vulnerable to a session hijacking attack due to improper session invalidation within the /edms/change-password.php component. This flaw allows an attacker to hijack active sessions. To remediate this vulnerability, users should apply the latest updat...

CVE-2025-50494

The PHPGurukul Car Washing Management System v1.0 is vulnerable to a session hijacking attack due to improper session invalidation in the /doctor/change-password.php component. Attackers can exploit this flaw to take over active sessions. Remediation involves addressing the session invalidation l...

CVE-2025-50494: Improper Input Validation

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to execute a session hijacking attack...

CVE-2025-50486

PHPGurukul Car Rental Project v3.0 is vulnerable to a session hijacking attack due to improper session invalidation within the /carrental/update-password.php component. The flaw stems from the application failing to properly terminate sessions during the password update process. To remediate this...

PHPGurukul e-Diary Management System Security Vulnerabilities

The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /edms/change-password.php. No details of the vulnerability are available at this time...

CVE-2025-50492: Improper Input Validation

Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...

PT-2025-31132 · Phpgurukul · Phpgurukul Online Library Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Library Management System version 3.0 Description: The software contains an improper session invalidation issue in the /library/change-password.php component. This allows attackers to execute a session hijacking attack...

CVE-2025-50491

Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack...

CVE-2025-50490

Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...

CVE-2025-50485

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack...

CVE-2025-50485: Insufficient Session Expiration

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack...

CVE-2025-50491: Insufficient Session Expiration

Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack...

CVE-2025-50489: Improper Input Validation

Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...

CVE-2025-50488: Insufficient Session Expiration

Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attack...

CVE-2025-50493: Improper Input Validation

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack...