Vulnerabilidades do Phpgurukul Hostel Management System
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Phpgurukul Hostel Management System: 2 registro(s), com versões afetadas e correções.cpe:2.3:a:phpgurukul:hostel_management_system
CVE-2025-63611
Alta · 8.7
CWE-79 08/01/2026
Cross-site Scripting (XSS) em Phpgurukul Hostel Management System
Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the Complaint) submitted via /register-complaint.php are stored and rendered unescaped in the admin viewer (/admin/complaint-details.php?cid=<id>). When an administrator opens the complaint, injected HTML/JavaScript executes in the admin's browser.
CVE-2025-13577
Média · 5.4
CWE-79 23/11/2025
PHPGurukul Hostel Management System register-complaint.php cross site scripting
A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a manipulation of the argument cdetails can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.