Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-53p2-vrj6-pr6p

Опубликовано: 28 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely

A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely

EPSS

Процентиль: 27%
0.00094
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-384

Связанные уязвимости

CVSS3: 9.1
nvd
10 месяцев назад

A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely

EPSS

Процентиль: 27%
0.00094
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-384