Phpgurukul Hostel Management System vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Phpgurukul Hostel Management System: 4 record(s), with affected versions and fixes.cpe:2.3:a:phpgurukul:hostel_management_system
CVE-2026-90851
Medium · 6.3
CWE-266 Sep 14, 2026
PHPGurukul Hostel Management System checklogin.php access control
A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be used.
CVE-2026-90850
Low · 2.4
CWE-79 Sep 14, 2026
PHPGurukul Hostel Management System manage-students.php cross site scripting
A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.
CVE-2025-63611
High · 8.7
CWE-79 Jan 8, 2026
Cross-site Scripting (XSS) in Phpgurukul Hostel Management System
Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the Complaint) submitted via /register-complaint.php are stored and rendered unescaped in the admin viewer (/admin/complaint-details.php?cid=<id>). When an administrator opens the complaint, injected HTML/JavaScript executes in the admin's browser.
CVE-2025-13577
Medium · 5.4
CWE-79 Nov 23, 2025
PHPGurukul Hostel Management System register-complaint.php cross site scripting
A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a manipulation of the argument cdetails can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.