CVE-2025-50490

HighCVSS 7.5

Published: 28/07/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

35th percentile - higher than 35% of all known CVEs

Summary

Improper session invalidation in the /elms/emp-changepassword.php component of PHPGurukul Student Result Management System v2.0 allows attackers to perform a session hijacking attack.

Risk Assessment

An attacker can hijack an administrator's or other privileged user's session, gaining unauthorized access to the system and its data.

Recommendation

Update the system to the latest version or apply a fix that properly invalidates the session after a password change.

Other vulnerabilities in PHPGurukul Student Result Management System

CVE-2025-50489High
In PHPGurukul Student Result Management System v2.0, the component /srms/change-password.php suffers from improper session invalidation. This allows attackers to perform a session hijacking attack.

Original NVD description (English source)

Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack.