CVE-2025-45953

Critical CVSS: 9.1

A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely

Vendor

Phpgurukul

Product

Hostel Management System

CWE

CWE-384

Yayın Tarihi

2025-04-28 20:15:21

Güncelleme

2025-04-30 18:03:25

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-384 Hostel Management System CRITICAL Phpgurukul 2025

Referanslar

http://phpgurukul.com https://github.com/VasilVK/CVE/blob/main/CVE-2025-45953/README.MD

Benzer Kayıtlar

Medium

CVE-2024-51226

A stored cross-site scripting (XSS) vulnerability in the component /admin/search-vehicle.php of Phpgurukul Vehicle Recor…

Medium

CVE-2024-51225

A stored cross-site scripting (XSS) vulnerability in the component /admin/add-brand.php of Phpgurukul Vehicle Record Man…

Medium

CVE-2024-51224

Multiple cross-site scripting (XSS) vulnerabilities in the component /admin/edit-vehicle.php of Phpgurukul Vehicle Recor…

Medium

CVE-2024-51223

A stored cross-site scripting (XSS) vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Manag…

Medium

CVE-2024-51222

A stored cross-site scripting (XSS) vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Manag…

Medium

CVE-2026-3403

A vulnerability was detected in PHPGurukul Student Record Management System 1.0. This issue affects some unknown process…