Unrated severityNVD Advisory· Published Apr 28, 2025· Updated Apr 29, 2025

CVE-2025-45949

Description

A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /loginsystem/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely and leading to account takeover.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Phpgurukul/User Registration \& Login And User Management Systemcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =3.3

Patches

Vulnerability mechanics

References

phpgurukul.commitre
github.com/VasilVK/CVE/blob/main/CVE-2025-45949/README.MDmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000