PT-2025-31136 · Phpgurukul · Phpgurukul E-Diary Management System

CVE-2025-50492

·

Publicado

2025-07-28

·

Atualizado

2025-07-29

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions PHPGurukul e-Diary Management System version 1
Description The application suffers from improper session invalidation in the /edms/change-password.php component, which could allow attackers to execute a session hijacking attack.
Recommendations Apply updates to address the session invalidation issue in the /edms/change-password.php component.

Exploit

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2025-50492

Produtos afetados

Phpgurukul E-Diary Management System