CVE-2025-50492: Input Validation
Published Jul 28, 2025
·Updated
Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack.
Affected Software
2 affected components
Phpgurukul e-Diary Management System
Phpgurukul e-Diary Management System=1.0
Event History
Jul 28, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-50492?
CVE-2025-50492 is considered a high severity vulnerability due to its potential for session hijacking.
2
How does CVE-2025-50492 affect the PHPGurukul e-Diary Management System?
CVE-2025-50492 allows attackers to exploit improper session invalidation in the change-password component, leading to potential session hijacking.
3
How do I fix CVE-2025-50492?
To mitigate CVE-2025-50492, ensure that session invalidation processes are properly implemented following password changes.
4
Who is affected by CVE-2025-50492?
Users of PHPGurukul e-Diary Management System version 1.0 are specifically affected by CVE-2025-50492.
5
What type of attack can be executed due to CVE-2025-50492?
CVE-2025-50492 allows attackers to perform session hijacking attacks due to improper session management.