Phpgurukul Hostel Management System
15 CVEs affecting Phpgurukul Hostel Management System. Latest disclosed: 2026-01-08. Critical: 2, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-5510 | Critical | 9.8 | 2020-01-08 | PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file. |
CVE-2025-45953 | Critical | 9.1 | 2025-04-28 | A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Imp… |
CVE-2021-43137 | High | 8.8 | 2021-12-01 | Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exits in hostel management system 2.1 via the name field in my-profile.php. Chai… |
CVE-2025-63611 | High | 8.7 | 2026-01-08 | Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the Complaint) submitted via /register-complaint.php a… |
CVE-2025-6155 | High | 7.3 | 2025-06-17 | A vulnerability was found in PHPGurukul Hostel Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /includes… |
CVE-2025-6154 | High | 7.3 | 2025-06-17 | A vulnerability was found in PHPGurukul Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /includ… |
CVE-2025-6153 | High | 7.3 | 2025-06-17 | A vulnerability has been found in PHPGurukul Hostel Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admi… |
CVE-2023-36939 | Medium | 6.1 | 2023-07-10 | Cross-Site Scripting (XSS) vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the search book… |
CVE-2023-34647 | Medium | 6.1 | 2023-06-28 | PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS). |
CVE-2023-34652 | Medium | 6.1 | 2023-06-28 | PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS) via Add New Course. |
CVE-2025-28129 | Medium | 5.4 | 2025-10-06 | Phpgurukul Hostel Management System 2.1 is vulnerable to clickjacking. |
CVE-2023-36375 | Medium | 5.4 | 2023-07-10 | Cross Site Scripting vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the Guardian name, Gu… |
CVE-2020-25270 | Medium | 5.4 | 2020-10-08 | PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City. |
CVE-2023-36376 | Medium | 4.8 | 2023-07-10 | Cross-Site Scripting (XSS) vulnerability in Hostel Management System v.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inje… |
CVE-2025-13577 | Low | 3.5 | 2025-11-24 | A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a… |