CVE-2025-6295

CVE-2025-6295 affects code-projects Hostel Management System 1.0. The vulnerability is an SQL injection in the /allocated_rooms.php file, caused by unsafely using the search_box parameter without proper validation. It can be exploited remotely to access or exfiltrate database data. Multiple conne...

CVE-2025-6295 code-projects Hostel Management System allocated_rooms.php sql injection

A vulnerability was found in code-projects Hostel Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /allocatedrooms.php. The manipulation of the argument searchbox leads to sql injection. The attack can be launched...