CNNVD-202507-3556 Information

CNNVD ID

CNNVD-202507-3556

CVE-2025-50485

  • CNNVD Published: 2025-07-28

Description (Chinese)

PHPGurukul Online Course Registration是PHPGurukul公司的一个在线课程注册系统。 PHPGurukul Online Course Registration v3.1版本存在安全漏洞,该漏洞源于组件/crm/change-password.php会话失效不当,可能导致会话劫持攻击。

Description (English)

PHPGurukul Online Course Renewal is an online course registration system for PHPGurukul. PHPGurukul Online Course Regulation v3.1 contains a security loophole, which arises from the invalidation of the component/crm/change-password.php session, which may lead to an hijacking attack.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

PHPGurukul

Published

2025-07-28

Last Modified

2026-02-24

References

https://github.com/VasilVK/CVE/tree/main/CVE-2025-50485 http://online.com http://phpgurukul.com https://access.redhat.com/security/cve/cve-2025-50485

Share on: