Approved changes feed: RSS · Atom

cpe:2.3:a:angeljudesuarez:hostel_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorAngeljudesuarez (da54a5a8-16d8-5d98-ae37-5a80108a9da9)
ProductHostel Management System (3d5a3158-fde6-59e6-9a12-d3bff2f302e1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-11119 vulnerable 2026-06-08 07:02:28.093368 itsourcecode Hostel Management System POST Request index.php cross site scripting
MEDIUM (4.3)
A security flaw has been discovered in itsourcecode Hostel Management System 1.0. Impacted is an unknown function of the file /justines/index.php of the component POST Request Handler. Performing manipulation of the argument from results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.
Published: 2025-09-28T20:32:06.429Z
Updated: 2025-09-29T14:07:06.147Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11040 vulnerable 2026-06-08 07:02:27.967121 code-projects Hostel Management System index.php sql injection
HIGH (7.3)
A vulnerability was detected in code-projects Hostel Management System 1.0. Affected by this issue is some unknown functionality of the file /justines/admin/mod_users/index.php?view=view. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.
Published: 2025-09-26T20:02:05.772Z
Updated: 2025-09-29T11:36:41.400Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10813 vulnerable 2026-06-08 07:02:27.552559 code-projects Hostel Management System index.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Hostel Management System 1.0. Affected is an unknown function of the file /justines/admin/mod_reports/index.php. The manipulation of the argument Home results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Published: 2025-09-22T20:02:05.881Z
Updated: 2025-09-22T20:27:56.750Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10812 vulnerable 2026-06-08 07:02:27.551885 code-projects Hostel Management System index.php sql injection
HIGH (7.3)
A vulnerability has been found in code-projects Hostel Management System 1.0. This impacts an unknown function of the file /justines/admin/mod_amenities/index.php?view=view. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-09-22T19:32:05.935Z
Updated: 2025-09-22T19:52:28.555Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10811 vulnerable 2026-06-08 07:02:27.551483 code-projects Hostel Management System index.php sql injection
HIGH (7.3)
A flaw has been found in code-projects Hostel Management System 1.0. This affects an unknown function of the file /justines/admin/mod_comments/index.php?view=view. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.
Published: 2025-09-22T19:02:06.681Z
Updated: 2025-09-22T19:54:55.158Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10799 vulnerable 2026-06-08 07:02:27.537779 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10798 vulnerable 2026-06-08 07:02:27.537392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10797 vulnerable 2026-06-08 07:02:27.536898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10796 vulnerable 2026-06-08 07:02:27.536318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.