CVE-2025-50488

HighCVSS 7.1

Published: 28/07/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

25th percentile - higher than 25% of all known CVEs

Summary

A vulnerability in PHPGurukul Online Library Management System v3.0 in the /library/change-password.php component is due to improper session invalidation. This allows attackers to perform a session hijacking attack.

Risk Assessment

An attacker can hijack a logged-in user's session, gaining unauthorized access to the system and library data.

Recommendation

Update the system to the latest version or apply a patch that ensures proper session invalidation after password change.

Other vulnerabilities in PHPGurukul Online Library Management System

CVE-2025-57118Critical
An issue in PHPGurukul Online-Library-Management-System v3.0 allows an attacker to escalate privileges via the index.php.

Original NVD description (English source)

Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attack.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS