CNNVD-202507-3549 Information

CNNVD ID

CNNVD-202507-3549

CVE-2025-50491

  • CNNVD Published: 2025-07-28

Description (Chinese)

PHPGurukul Bank Locker Management System是PHPGurukul公司的一个银行储物柜管理系统。 PHPGurukul Bank Locker Management System v1版本存在安全漏洞,该漏洞源于组件/banker/change-password.php会话失效不当,可能导致会话劫持攻击。

Description (English)

PHPGurukul Bank Locker Management System is a bank locker management system for PHPGurukul. PHPGurukul Bank Locker Management System v1 has a security loophole, which stems from the improper failure of the component/banker/change-password.php session, which could lead to a session hijacking attack.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

PHPGurukul

Published

2025-07-28

Last Modified

2026-02-24

References

http://bank.com https://github.com/VasilVK/CVE/tree/main/CVE-2025-50491 http://phpgurukul.com https://access.redhat.com/security/cve/cve-2025-50491

Share on: