CVE-2025-45949
A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /loginsystem/change-password.php file of the user panel - Chang…
Published: 2025-04-28 · CVSS: 9.8 · CVSS 3.1
A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /loginsystem/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely and leading to account takeover.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7