Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f4cw-p89c-v458

Опубликовано: 28 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /loginsystem/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely and leading to account takeover.

A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /loginsystem/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely and leading to account takeover.

EPSS

Процентиль: 32%
0.00127
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-384

Связанные уязвимости

CVSS3: 9.8
nvd
10 месяцев назад

A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /loginsystem/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely and leading to account takeover.

EPSS

Процентиль: 32%
0.00127
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-384