PT-2025-31144 · Phpgurukul · Phpgurukul Blood Bank & Donor Management System

CVE-2025-50487

·

Publicado

2025-07-28

·

Atualizado

2025-07-29

CVSS v3.1

7.1

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions PHPGurukul Blood Bank & Donor Management System version 2.4
Description Improper session invalidation in the component /bbdms/change-password.php allows attackers to execute a session hijacking attack.
Recommendations PHPGurukul Blood Bank & Donor Management System version 2.4: Ensure proper session invalidation mechanisms are implemented in the /bbdms/change-password.php component to prevent session hijacking.

Exploit

Correção

Insufficient Session Expiration

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-613

Identificadores relacionados

CVE-2025-50487

Produtos afetados

Phpgurukul Blood Bank & Donor Management System