CVE-2025-50488
BaseFortify
Publication date: 2025-07-28
Last updated on: 2025-07-29
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| phpgurukul | online_library_management_system | 3.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-613 | According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization." |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an improper session invalidation issue in the /library/change-password.php component of PHPGurukul Online Library Management System v3.0. It allows attackers to perform session hijacking attacks by exploiting the failure to properly invalidate user sessions during the password change process.
How can this vulnerability impact me? :
An attacker can hijack a user's session, potentially gaining unauthorized access to the user's account and sensitive information. This can lead to data breaches, unauthorized actions on behalf of the user, and compromise of the system's security.