CVE-2025-50489

HighCVSS 7.5

Published: 28/07/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.51%

40th percentile - higher than 40% of all known CVEs

Summary

In PHPGurukul Student Result Management System v2.0, the component /srms/change-password.php suffers from improper session invalidation. This allows attackers to perform a session hijacking attack.

Risk Assessment

An attacker can hijack a logged-in user's session, gaining unauthorized access to their account and data within the student result management system.

Recommendation

Update the system to the latest version or apply a patch that ensures proper session invalidation after password change.

Other vulnerabilities in PHPGurukul Student Result Management System

CVE-2025-50490High
Improper session invalidation in the /elms/emp-changepassword.php component of PHPGurukul Student Result Management System v2.0 allows attackers to perform a session hijacking attack.

Original NVD description (English source)

Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack.