9.1
CVE-2025-45953
- EPSS 0.42%
- Veröffentlicht 28.04.2025 00:00:00
- Zuletzt bearbeitet 05.07.2026 01:21:46
- CVE-Watchlists
- Unerledigt
A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phpgurukul ≫ Hostel Management System Version2.1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.42% | 0.348 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| CISA-ADP | 9.1 | 3.9 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
|
CWE-384 Session Fixation
Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.
https://github.com/VasilVK/CVE/blob/main/CVE-2025-45953/README.MD