PHPGurukul Hostel Management System 2.1
Approved changes feed: RSS · Atom
cpe:2.3:a:phpgurukul:hostel_management_system:2.1:*:*:*:*:*:*:*
part: a version: 2.1 update: *
| Vendor | Phpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d) |
|---|---|
| Product | Hostel Management System (664cb37a-2e03-5639-9830-4a1192246ae8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-63611 |
vulnerable | 2026-06-08 07:39:17.684140 |
Details available
Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the Complaint) submitted via /register-complaint.php are stored and rendered unescaped in the admin viewer (/admin/complaint-details.php?cid=<id>). When an administrator opens the complaint, injected HTML/JavaScript executes in the admin's browser.
Published: 2026-01-08T00:00:00.000Z
Updated: 2026-01-08T16:37:29.242Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-45953 |
vulnerable | 2026-06-08 07:25:11.159229 |
Details available
A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely
Published: 2025-04-28T00:00:00.000Z
Updated: 2026-07-08T14:15:23.122Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-28129 |
vulnerable | 2026-06-08 07:14:56.017792 |
Details available
Phpgurukul Hostel Management System 2.1 is vulnerable to clickjacking.
Published: 2025-10-06T00:00:00.000Z
Updated: 2025-10-06T18:22:53.756Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13577 |
vulnerable | 2026-06-08 07:04:32.542517 |
PHPGurukul Hostel Management System register-complaint.php cross site scripting
LOW (3.5)
A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a manipulation of the argument cdetails can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.
Published: 2025-11-24T01:32:07.530Z
Updated: 2026-02-24T06:37:33.502Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36939 |
vulnerable | 2026-06-08 06:08:14.724645 |
Details available
Cross-Site Scripting (XSS) vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the search booking field.
Published: 2023-07-10T00:00:00.000Z
Updated: 2024-08-02T17:01:10.001Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36376 |
vulnerable | 2026-06-08 06:08:11.225345 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36375 |
vulnerable | 2026-06-08 06:08:11.224864 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43137 |
vulnerable | 2026-06-08 05:36:42.312035 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25270 |
vulnerable | 2026-06-08 05:22:36.664636 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.