https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-63611.htmlhttps://patchthecve.com/cve/CVE-2025-63611.htmlWed, 17 Jun 2026 09:53:17 +0000HIGH 8.7: Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the Complaint) submitted via /register-complaint.php are stored and rendered unescaped in the admin viewer (/admin/complaint-details.php?cid=<id>). When an administrator opens the complaint, injehttps://patchthecve.com/cve/CVE-2025-13577.htmlhttps://patchthecve.com/cve/CVE-2025-13577.htmlThu, 08 Oct 2026 10:10:00 +0000LOW 3.5: A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a manipulation of the argument cdetails can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been puhttps://patchthecve.com/cve/CVE-2025-28129.htmlhttps://patchthecve.com/cve/CVE-2025-28129.htmlWed, 17 Jun 2026 09:04:35 +0000MEDIUM 5.4: Phpgurukul Hostel Management System 2.1 is vulnerable to clickjacking.https://patchthecve.com/cve/CVE-2025-11119.htmlhttps://patchthecve.com/cve/CVE-2025-11119.htmlFri, 09 Oct 2026 09:10:00 +0000MEDIUM 4.3: A security flaw has been discovered in itsourcecode Hostel Management System 1.0. Impacted is an unknown function of the file /justines/index.php of the component POST Request Handler. Performing manipulation of the argument from results in cross site scripting. It is possible to initiate the attackhttps://patchthecve.com/cve/CVE-2025-11040.htmlhttps://patchthecve.com/cve/CVE-2025-11040.htmlFri, 09 Oct 2026 10:10:00 +0000HIGH 7.3: A vulnerability was detected in code-projects Hostel Management System 1.0. Affected by this issue is some unknown functionality of the file /justines/admin/mod_users/index.php?view=view. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit ihttps://patchthecve.com/cve/CVE-2025-10813.htmlhttps://patchthecve.com/cve/CVE-2025-10813.htmlSun, 11 Oct 2026 20:10:00 +0000HIGH 7.3: A vulnerability was found in code-projects Hostel Management System 1.0. Affected is an unknown function of the file /justines/admin/mod_reports/index.php. The manipulation of the argument Home results in sql injection. It is possible to launch the attack remotely. The exploit has been made public ahttps://patchthecve.com/cve/CVE-2025-10812.htmlhttps://patchthecve.com/cve/CVE-2025-10812.htmlSun, 11 Oct 2026 20:10:00 +0000HIGH 7.3: A vulnerability has been found in code-projects Hostel Management System 1.0. This impacts an unknown function of the file /justines/admin/mod_amenities/index.php?view=view. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has behttps://patchthecve.com/cve/CVE-2025-10811.htmlhttps://patchthecve.com/cve/CVE-2025-10811.htmlWed, 17 Jun 2026 08:29:02 +0000HIGH 7.3: A flaw has been found in code-projects Hostel Management System 1.0. This affects an unknown function of the file /justines/admin/mod_comments/index.php?view=view. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publihttps://patchthecve.com/cve/CVE-2025-10799.htmlhttps://patchthecve.com/cve/CVE-2025-10799.htmlWed, 17 Jun 2026 08:29:01 +0000HIGH 7.3: A security flaw has been discovered in code-projects Hostel Management System 1.0. The affected element is an unknown function of the file /justines/admin/mod_reservation/index.php?view=view. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is pohttps://patchthecve.com/cve/CVE-2025-10798.htmlhttps://patchthecve.com/cve/CVE-2025-10798.htmlWed, 30 Sep 2026 23:10:00 +0000HIGH 7.3: A vulnerability was identified in code-projects Hostel Management System 1.0. Impacted is an unknown function of the file /justines/admin/mod_roomtype/index.php?view=view. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly availahttps://patchthecve.com/cve/CVE-2025-10797.htmlhttps://patchthecve.com/cve/CVE-2025-10797.htmlWed, 17 Jun 2026 08:29:00 +0000HIGH 7.3: A vulnerability was determined in code-projects Hostel Management System 1.0. This issue affects some unknown processing of the file /justines/index.php. This manipulation of the argument log_email causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed anhttps://patchthecve.com/cve/CVE-2025-10796.htmlhttps://patchthecve.com/cve/CVE-2025-10796.htmlWed, 30 Sep 2026 23:10:00 +0000HIGH 7.3: A vulnerability was found in code-projects Hostel Management System 1.0. This vulnerability affects unknown code of the file /justines/admin/login.php. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been made public and could be https://patchthecve.com/cve/CVE-2025-8964.htmlhttps://patchthecve.com/cve/CVE-2025-8964.htmlWed, 17 Jun 2026 10:08:02 +0000MEDIUM 5.3: A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostel_manage.exe of the component Login. The manipulation leads to improper authentication. It is possible to launch the attack on the local host. The exploit has been disclosed tohttps://patchthecve.com/cve/CVE-2025-8962.htmlhttps://patchthecve.com/cve/CVE-2025-8962.htmlWed, 17 Jun 2026 10:08:02 +0000MEDIUM 5.3: A vulnerability was found in code-projects Hostel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file hostel_manage.exe of the component Login Form. The manipulation of the argument uname leads to stack-based buffer overflow. Local access is required to apprhttps://patchthecve.com/cve/CVE-2025-6296.htmlhttps://patchthecve.com/cve/CVE-2025-6296.htmlWed, 17 Jun 2026 10:01:33 +0000HIGH 7.3: A vulnerability was found in code-projects Hostel Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /empty_rooms.php. The manipulation of the argument search_box leads to sql injection. The attack may be launched remotely. The explhttps://patchthecve.com/cve/CVE-2025-6295.htmlhttps://patchthecve.com/cve/CVE-2025-6295.htmlWed, 17 Jun 2026 10:01:33 +0000HIGH 7.3: A vulnerability was found in code-projects Hostel Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /allocated_rooms.php. The manipulation of the argument search_box leads to sql injection. The attack can be launched remothttps://patchthecve.com/cve/CVE-2025-6294.htmlhttps://patchthecve.com/cve/CVE-2025-6294.htmlWed, 17 Jun 2026 10:01:33 +0000HIGH 7.3: A vulnerability was found in code-projects Hostel Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /contact.php. The manipulation of the argument hostel_name leads to sql injection. It is possible to launch the attack remotely. The exploit has behttps://patchthecve.com/cve/CVE-2025-6293.htmlhttps://patchthecve.com/cve/CVE-2025-6293.htmlWed, 17 Jun 2026 10:01:33 +0000HIGH 7.3: A vulnerability was found in code-projects Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /contact_manager.php. The manipulation of the argument student_roll_no leads to sql injection. The attack may be initiated remotely. The exploit https://patchthecve.com/cve/CVE-2025-6159.htmlhttps://patchthecve.com/cve/CVE-2025-6159.htmlWed, 17 Jun 2026 10:01:17 +0000HIGH 7.3: A vulnerability classified as critical was found in code-projects Hostel Management System 1.0. This vulnerability affects unknown code of the file /allocate_room.php. The manipulation of the argument search_box leads to sql injection. The attack can be initiated remotely. The exploit has been disclhttps://patchthecve.com/cve/CVE-2025-6155.htmlhttps://patchthecve.com/cve/CVE-2025-6155.htmlWed, 17 Jun 2026 10:01:16 +0000HIGH 7.3: A vulnerability was found in PHPGurukul Hostel Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /includes/login-hm.inc.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploihttps://patchthecve.com/cve/CVE-2025-6154.htmlhttps://patchthecve.com/cve/CVE-2025-6154.htmlWed, 17 Jun 2026 10:01:16 +0000HIGH 7.3: A vulnerability was found in PHPGurukul Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /includes/login.inc.php. The manipulation of the argument student_roll_no leads to sql injection. The attack may be initiated remotely. The exploit https://patchthecve.com/cve/CVE-2025-6153.htmlhttps://patchthecve.com/cve/CVE-2025-6153.htmlWed, 17 Jun 2026 10:01:16 +0000HIGH 7.3: A vulnerability has been found in PHPGurukul Hostel Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/students.php. The manipulation of the argument search_box leads to sql injection. The attack can be initiated remotely. The exploit has beehttps://patchthecve.com/cve/CVE-2025-45953.htmlhttps://patchthecve.com/cve/CVE-2025-45953.htmlSun, 05 Jul 2026 01:21:46 +0000CRITICAL 9.1: A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotelyhttps://patchthecve.com/cve/CVE-2024-13012.htmlhttps://patchthecve.com/cve/CVE-2024-13012.htmlWed, 17 Jun 2026 07:00:58 +0000LOW 3.5: A vulnerability, which was classified as problematic, has been found in code-projects Hostel Management System 1.0. This issue affects some unknown processing of the file /admin/registration.php. The manipulation of the argument fname/mname/lname leads to cross site scripting. The attack may be inithttps://patchthecve.com/cve/CVE-2024-12790.htmlhttps://patchthecve.com/cve/CVE-2024-12790.htmlWed, 17 Jun 2026 07:00:30 +0000LOW 3.5: A vulnerability was found in code-projects Hostel Management Site 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file room-details.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to th