CVE-2025-45949 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /loginsystem/change-password.php file of the u…
Critical CVSS: 9.8

CVE-2025-45949

A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /loginsystem/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely and leading to account takeover.
Vendor
Phpgurukul
Product
User Registration \& Login And User Management System
CWE
CWE-384
Yayın Tarihi
2025-04-28 20:15:21
Güncelleme
2025-04-30 18:03:41
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-384 User Registration \& Login And User Management System CRITICAL Phpgurukul 2025

Referanslar

http://phpgurukul.com https://github.com/VasilVK/CVE/blob/main/CVE-2025-45949/README.MD