Session Hijacking Vulnerability in PHPGurukul e-Diary Management System
CVE-2025-50492

7.5HIGH

Key Information:

Vendor

PHPGurukul
Status
e-Diary Management System
Vendor
CVE Published:
28 July 2025

What is CVE-2025-50492?

The e-Diary Management System v1 from PHPGurukul contains a flaw in the /edms/change-password.php component that improperly manages session invalidation. This vulnerability can be exploited by attackers to perform session hijacking, allowing them unauthorized access to user accounts. Users of this system should take immediate action to ensure their data security by updating their software and implementing additional security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://phpgurukul.com
http://e-diary.com
https://github.com/VasilVK/CVE/tree/main/CVE-2025-50492

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.