Vulnerabilities

TI-2025-39383 CVE-2025-63611 · GHSA-3xgw-97m8-xp2p

Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint…

HIGH 71

Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the Complaint) submitted via /register-complaint.php are stored and rendered unescaped in the admin viewer (/admin/…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00312 Published 2026-01-08 No fix listed CWE-79

TI-2025-12407 CVE-2025-13577 · GHSA-vcmm-whq7-r33v

PHPGurukul Hostel Management System register-complaint.php cross site scripting

MEDIUM 56

A flaw has been found in PHPGurukul Hostel Management System 2.1.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00236 Published 2025-11-24 No fix listed CWE-79

TI-2025-20723 CVE-2025-28129 · GHSA-xfrr-v952-v375

Phpgurukul Hostel Management System 2.1 is vulnerable to clickjacking.

MEDIUM 58

Phpgurukul Hostel Management System 2.1 is vulnerable to clickjacking.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00216 Published 2025-10-06 No fix listed CWE-1021

TI-2025-05565 CVE-2025-6155 · GHSA-m2pw-q8f3-29q8

PHPGurukul Hostel Management System login-hm.inc.php sql injection

HIGH 70

A vulnerability was found in PHPGurukul Hostel Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00514 Published 2025-06-17 No fix listed CWE-74

TI-2025-05564 CVE-2025-6154 · GHSA-xp5f-4q2v-q3xf

PHPGurukul Hostel Management System login.inc.php sql injection

HIGH 70

A vulnerability was found in PHPGurukul Hostel Management System 1.0 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00514 Published 2025-06-17 No fix listed CWE-74

TI-2025-05563 CVE-2025-6153 · GHSA-454h-38w3-8j8m

PHPGurukul Hostel Management System students.php sql injection

HIGH 70

A vulnerability has been found in PHPGurukul Hostel Management System 1.0 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00514 Published 2025-06-17 No fix listed CWE-74

TI-2025-28900 CVE-2025-45953 · GHSA-53p2-vrj6-pr6p

A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the…

HIGH 80

A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00448 Published 2025-04-28 No fix listed CWE-384

TI-2023-18715 CVE-2023-36939 · GHSA-fwpj-frr9-2r36

Cross-Site Scripting (XSS) vulnerability in Hostel Management System v2.1 allows an…

LOW 28

Cross-Site Scripting (XSS) vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the search booking field.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00557 Published 2023-07-10 No fix listed CWE-79

TI-2023-18241 CVE-2023-36376 · GHSA-679c-fmwp-9p5j

Cross-Site Scripting (XSS) vulnerability in Hostel Management System v.2.1 allows…

LOW 23

Cross-Site Scripting (XSS) vulnerability in Hostel Management System v.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the add course section.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00588 Published 2023-07-10 No fix listed CWE-79

TI-2023-18240 CVE-2023-36375 · GHSA-j94g-69xw-xx5q

Cross Site Scripting vulnerability in Hostel Management System v2.1 allows an attacker to…

LOW 26

Cross Site Scripting vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the Guardian name, Guardian relation, complimentary address, city, permanent addre…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00873 Published 2023-07-10 No fix listed CWE-79

TI-2023-17362 CVE-2023-34652 · GHSA-85v5-pp3q-c7gj

PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS) via Add New Course.

LOW 28

PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS) via Add New Course.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00493 Published 2023-06-28 No fix listed CWE-79

TI-2023-17358 CVE-2023-34647 · GHSA-6c8g-8qxg-99cm

PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).

LOW 27

PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00358 Published 2023-06-28 No fix listed CWE-79

TI-2021-19168 CVE-2021-43137 · GHSA-3q67-fwp6-mgfc

Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exits in…

LOW 39

Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exits in hostel management system 2.1 via the name field in my-profile.php.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00529 Published 2021-12-01 No fix listed CWE-352

TI-2020-15504 CVE-2020-25270 · GHSA-9q79-fjpr-c8vh

PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation…

LOW 30

PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.03185 Published 2020-10-08 No fix listed CWE-79

TI-2020-04482 CVE-2020-5510 · GHSA-7hrp-wc47-wvpj

PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file.

MEDIUM 46

PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02112 Published 2020-01-08 No fix listed CWE-89

Vulnerabilities

Filters