Hostel Management System

hostel_management_system

Vendor: Phpgurukul • 15 CVEs

CVEs (15)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-63611 1Phpgurukul 1Hostel Management System Jun 17, 2026 Jan 8, 2026 N/A· v4 8.7 HIGH· v3 N/A· v2 Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the Complaint) submitted via /register-complaint.php are stored and rendered unescaped in the admin viewer (/admin/...Show more Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the Complaint) submitted via /register-complaint.php are stored and rendered unescaped in the admin viewer (/admin/complaint-details.php?cid=<id>). When an administrator opens the complaint, injected HTML/JavaScript executes in the admin's browser.Show less
CVE-2025-13577 1Phpgurukul 1Hostel Management System Jun 17, 2026 Nov 24, 2025 2.0 LOW· v4 5.4 MEDIUM· v3 4.0 MEDIUM· v2 A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a manipulation of the argument cdetails can lead to cross site...Show more A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a manipulation of the argument cdetails can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.Show less
CVE-2025-28129 1Phpgurukul 1Hostel Management System Jun 17, 2026 Oct 6, 2025 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Phpgurukul Hostel Management System 2.1 is vulnerable to clickjacking.
CVE-2025-6155 1Phpgurukul 1Hostel Management System Jun 17, 2026 Jun 17, 2025 5.5 MEDIUM· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability was found in PHPGurukul Hostel Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /includes/login-hm.inc.php. The manipulation of the argument Username...Show more A vulnerability was found in PHPGurukul Hostel Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /includes/login-hm.inc.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.Show less
CVE-2025-6154 1Phpgurukul 1Hostel Management System Jun 17, 2026 Jun 17, 2025 5.5 MEDIUM· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability was found in PHPGurukul Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /includes/login.inc.php. The manipulation of the argument student_ro...Show more A vulnerability was found in PHPGurukul Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /includes/login.inc.php. The manipulation of the argument student_roll_no leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.Show less
CVE-2025-6153 1Phpgurukul 1Hostel Management System Jun 17, 2026 Jun 17, 2025 5.5 MEDIUM· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability has been found in PHPGurukul Hostel Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/students.php. The manipulation of the argument search_box l...Show more A vulnerability has been found in PHPGurukul Hostel Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/students.php. The manipulation of the argument search_box leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.Show less
CVE-2025-45953 1Phpgurukul 1Hostel Management System Jul 5, 2026 Apr 28, 2025 N/A· v4 9.1 CRITICAL· v3 N/A· v2 A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking att...Show more A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotelyShow less
CVE-2023-36939 1Phpgurukul 1Hostel Management System Jun 17, 2026 Jul 10, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Cross-Site Scripting (XSS) vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the search booking field.
CVE-2023-36375 1Phpgurukul 1Hostel Management System Jun 17, 2026 Jul 10, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Cross Site Scripting vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the Guardian name, Guardian relation, complimentary address, city, permanent addre...Show more Cross Site Scripting vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the Guardian name, Guardian relation, complimentary address, city, permanent address, and city parameters in the Book Hostel & Room Details page.Show less
CVE-2023-36376 1Phpgurukul 1Hostel Management System Jun 17, 2026 Jul 10, 2023 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Cross-Site Scripting (XSS) vulnerability in Hostel Management System v.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the add course section.
CVE-2023-34647 1Phpgurukul 1Hostel Management System Jun 17, 2026 Jun 28, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).
CVE-2023-34652 1Phpgurukul 1Hostel Management System Jun 17, 2026 Jun 28, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS) via Add New Course.
CVE-2021-43137 1Phpgurukul 1Hostel Management System Jun 17, 2026 Dec 1, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exits in hostel management system 2.1 via the name field in my-profile.php. Chaining to this both vulnerabilities leads to account takeover.
CVE-2020-25270 1Phpgurukul 1Hostel Management System Jun 17, 2026 Oct 8, 2020 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City.
CVE-2020-5510 1Phpgurukul 1Hostel Management System Jun 17, 2026 Jan 8, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file.