Lucene search
+L

645 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 10:58 a.m.•15 views

CVE-2025-63611

Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields Explain the Complaint submitted via /register-complaint.php are stored and rendered unescaped in the admin viewer /admin/complaint-details.php?cid=. When an administrator opens the complaint, injected...

8.7CVSS6.2AI score0.00305EPSS
SaveExploits1References1
NVD
NVD
•added 2026/01/08 4:15 p.m.•15 views

CVE-2025-63611

Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields Explain the Complaint submitted via /register-complaint.php are stored and rendered unescaped in the admin viewer /admin/complaint-details.php?cid=. When an administrator opens the complaint, injected...

8.7CVSS0.00305EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/01/08 3:15 a.m.•21 views

CVE-2026-0642

A vulnerability was detected in projectworlds House Rental and Property Listing 1.0. This issue affects some unknown processing of the file /app/complaint.php. The manipulation of the argument Name results in cross site scripting. The attack may be launched remotely. The exploit is now public and...

6.1CVSS5.6AI score0.00243EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/01/08 12:00 a.m.•8 views

CVE-2025-63611

Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields Explain the Complaint submitted via /register-complaint.php are stored and rendered unescaped in the admin viewer /admin/complaint-details.php?cid=. When an administrator opens the complaint, injected...

5.8AI score0.00305EPSS
SaveExploits1References2
CVE
CVE
•added 2026/01/08 12:00 a.m.•32 views

CVE-2025-63611

The phpgurukul Hostel Management System v2.1 is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of user-provided input. Specifically, the application fails to properly encode or escape the "Explain the Complaint" field submitted via the /register-complaint.php endpo...

5.8AI score0.00305EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/01/08 12:00 a.m.•15 views

PT-2026-1840

Name of the Vulnerable Software and Affected Versions phpgurukul Hostel Management System version 2.1 Description The application stores user-provided complaint data, specifically the 'Explain the Complaint' field submitted through the /register-complaint.php endpoint, without proper output...

8.7CVSS7.2AI score0.00305EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/01/08 12:00 a.m.•40 views

CVE-2025-63611

Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields Explain the Complaint submitted via /register-complaint.php are stored and rendered unescaped in the admin viewer /admin/complaint-details.php?cid=. When an administrator opens the complaint, injected...

0.00305EPSS
SaveExploits1References2
NVD
NVD
•added 2026/01/07 12:17 p.m.•35 views

CVE-2026-0642

A vulnerability was detected in projectworlds House Rental and Property Listing 1.0. This issue affects some unknown processing of the file /app/complaint.php. The manipulation of the argument Name results in cross site scripting. The attack may be launched remotely. The exploit is now public and...

6.1CVSS0.00243EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2026/01/07 12:00 a.m.•9 views

Projectworlds House Rental and Property Listing 安全漏洞

Projectworlds House Rental and Property Listing is an open source house rental and property listing system by Projectworlds. A security vulnerability exists in Projectworlds House Rental and Property Listing version 1.0, which stems from an incorrect manipulation of the parameter Name in the file...

6.1CVSS3.7AI score0.00243EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/01/06 10:32 p.m.•52 views

CVE-2026-0642 projectworlds House Rental and Property Listing complaint.php cross site scripting

A vulnerability was detected in projectworlds House Rental and Property Listing 1.0. This issue affects some unknown processing of the file /app/complaint.php. The manipulation of the argument Name results in cross site scripting. The attack may be launched remotely. The exploit is now public and...

4.8CVSS0.00243EPSS
SaveExploits1References5
CNVD
CNVD
•added 2025/11/27 12:00 a.m.•16 views

Hostel Management System register-complaint.php file cross-site scripting vulnerability

Hostel Management System is a hostel management system. Hostel Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter cdetails in the file /register-complaint.php, which can be exploit...

5.4CVSS6.3AI score0.00217EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/25 1:33 a.m.•31 views

CVE-2025-13577

A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a manipulation of the argument cdetails can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.4CVSS3.4AI score0.00217EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/24 2:15 a.m.•21 views

CVE-2025-13577

A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a manipulation of the argument cdetails can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.4CVSS0.00217EPSS
SaveExploits0References4
OSV
OSV
•added 2025/11/24 2:15 a.m.•19 views

CVE-2025-13577

A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a manipulation of the argument cdetails can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.4CVSS4.2AI score0.00217EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/11/24 1:32 a.m.•31 views

CVE-2025-13577 PHPGurukul Hostel Management System register-complaint.php cross site scripting

A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a manipulation of the argument cdetails can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.1CVSS0.00217EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/11/24 1:32 a.m.•6 views

CVE-2025-13577 PHPGurukul Hostel Management System register-complaint.php cross site scripting

A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a manipulation of the argument cdetails can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.1CVSS3.4AI score0.00217EPSS
SaveExploits0References4
CVE
CVE
•added 2025/11/24 1:32 a.m.•40 views

CVE-2025-13577

The CVE-2025-13577 entry concerns PHPGurukul Hostel Management System 2.1, where the /register-complaint.php file’s cdetails parameter is vulnerable to cross-site scripting due to insufficient input filtering/escaping. Multiple connected sources (CNVD, RH/Red Hat, CNNVD, CVE listings) confirm rem...

5.4CVSS3.4AI score0.00217EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
•added 2025/11/24 1:32 a.m.•6 views

CVE-2025-13577

A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a manipulation of the argument cdetails can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.4CVSS3.7AI score0.00217EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
•added 2025/11/24 1:32 a.m.•13 views

EUVD-2025-198597

A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing manipulation of the argument cdetails can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.1CVSS5.1AI score0.00217EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/11/24 12:00 a.m.•25 views

PT-2025-47872

A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing manipulation of the argument cdetails can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.1CVSS5.5AI score0.00217EPSS
SaveExploits0References5
Rows per page
Query Builder