7.1
CVE-2025-50486
- EPSS 0.04%
- Veröffentlicht 28.07.2025 00:00:00
- Zuletzt bearbeitet 29.07.2025 21:14:58
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginImproper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phpgurukul ≫ E-diary Management System Version1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.04% | 0.129 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 7.1 | 2.8 | 4.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
|
CWE-613 Insufficient Session Expiration
According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."