Hostel Management System (Phpgurukul) - vulnerabilities (CVEs)
17 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2026-09-15. Vendor: Phpgurukul.
CVEs of Hostel Management System
- CVE-2026-90851 - CVSS 6.3 (medium), 2026-09-15: A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation…
- CVE-2026-90850 - CVSS 4.8 (medium), 2026-09-15: A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file…
- CVE-2025-63611 - CVSS 8.7 (high), 2026-01-08: Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the Complaint) submitted via /register-complaint.php…
- CVE-2025-13577 - CVSS 5.4 (medium), 2025-11-24: A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a…
- CVE-2025-28129 - CVSS 5.4 (medium), 2025-10-06: Phpgurukul Hostel Management System 2.1 is vulnerable to clickjacking.
- CVE-2025-6155 - CVSS 9.8 (critical), 2025-06-17: A vulnerability was found in PHPGurukul Hostel Management System 1.0. It has been classified as critical. Affected is an unknown function of the file…
- CVE-2025-6154 - CVSS 9.8 (critical), 2025-06-17: A vulnerability was found in PHPGurukul Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file…
- CVE-2025-6153 - CVSS 9.8 (critical), 2025-06-17: A vulnerability has been found in PHPGurukul Hostel Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file…
- CVE-2025-45953 - CVSS 9.1 (critical), 2025-04-28: A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component.…
- CVE-2023-36939 - CVSS 6.1 (medium), 2023-07-10: Cross-Site Scripting (XSS) vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the search…
- CVE-2023-36375 - CVSS 5.4 (medium), 2023-07-10: Cross Site Scripting vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the Guardian name,…
- CVE-2023-36376 - CVSS 4.8 (medium), 2023-07-10: Cross-Site Scripting (XSS) vulnerability in Hostel Management System v.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload…
- CVE-2023-34647 - CVSS 6.1 (medium), 2023-06-28: PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).
- CVE-2023-34652 - CVSS 6.1 (medium), 2023-06-28: PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS) via Add New Course.
- CVE-2021-43137 - CVSS 8.8 (high), 2021-12-01: Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exits in hostel management system 2.1 via the name field in my-profile.php.…
- CVE-2020-25270 - CVSS 5.4 (medium), 2020-10-08: PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City.
- CVE-2020-5510 - CVSS 9.8 (critical), 2020-01-08: PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file.
