Hostel Management System 2.1 - Cross Site Scripting Vulnerability

Exploit Title: Hostel Management System 2.1 - Cross Site Scripting XSS Exploit Author: Chinmay Vishwas Divekar Vendor Homepage: https://phpgurukul.com/hostel-management-system/ Software Link: https://phpgurukul.com/hostel-management-system/ Version: V 2.1 Tested on: PopOS20.10 Steps to reproduce ...

Hostel Management System 2.1 - Cross Site Scripting (XSS)

Exploit Title: Hostel Management System 2.1 - Cross Site Scripting XSS Date: 26/12/2021 Exploit Author: Chinmay Vishwas Divekar Vendor Homepage: https://phpgurukul.com/hostel-management-system/ Software Link: https://phpgurukul.com/hostel-management-system/ Version: V 2.1 Tested on: PopOS20.10...

Hostel Management System my-profile.php File Cross-Site Request Forgery Vulnerability

Hostel Management System is a hostel management system. Hostel Management System suffers from a cross-site request forgery vulnerability that stems from a lack of effective filtering and restriction of the name field in my-profile.php in the software, no details of the vulnerability are available...

CVE-2021-43137

Cross-Site Scripting XSS and Cross-Site Request Forgery CSRF vulnerability exits in hostel management system 2.1 via the name field in my-profile.php. Chaining to this both vulnerabilities leads to account takeover...

CVE-2021-43137

Cross-Site Scripting XSS and Cross-Site Request Forgery CSRF vulnerability exits in hostel management system 2.1 via the name field in my-profile.php. Chaining to this both vulnerabilities leads to account takeover...

Cross site request forgery (csrf)

Cross-Site Scripting XSS and Cross-Site Request Forgery CSRF vulnerability exits in hostel management system 2.1 via the name field in my-profile.php. Chaining to this both vulnerabilities leads to account takeover...

CVE-2021-43137

Cross-Site Scripting XSS and Cross-Site Request Forgery CSRF vulnerability exits in hostel management system 2.1 via the name field in my-profile.php. Chaining to this both vulnerabilities leads to account takeover...

CVE-2021-43137

CVE-2021-43137 affects the hostel management system version 2.1, with a Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability in the name field of my-profile.php . The connected PT-2021-23750 entry provides concrete details: exploiting the name field via my-profile.php ca...

PHPGurukul Hostel Management System 跨站脚本漏洞

Hostel Management System is a hostel management system. Hostel Management System suffers from a cross-site request forgery vulnerability that stems from a lack of effective filtering and restriction of the name field in my-profile.php in the software, no details of the vulnerability are available...

PT-2021-23750 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: hostel management system version 2.1 Description: The issue concerns Cross-Site Scripting XSS and Cross-Site Request Forgery CSRF vulnerabilities. These vulnerabilities exist via the name field in the "my-profile.php" page. By chaining these...

Hostel Management System 2.1 - Cross Site Scripting (Multiple Fields)

Exploit Title: PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, City Google Dork: N/A Date: 2020-10-08 Exploit Author: Kokn3t Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/hostel-management-syste...

CVE-2020-25270

PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City...

CVE-2020-25270

PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City...

Cross site scripting

PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City...

CVE-2020-25270

PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City...

CVE-2020-25270

CVE-2020-25270 affects PHPGurukul hostel-management-system version 2.1. It specifies a cross-site scripting (XSS) vulnerability via input fields in the Guardian section (Guardian Name, Guardian Relation, Guardian Contact no, Address, City) that can trigger script execution. Multiple connected sou...

CVE-2020-5510

PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file...

CVE-2020-5510

PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file...

Sql injection

PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file...

CVE-2020-5510

PHPGurukul Hostel Management System v2.0 is affected by an SQL injection in the full-profile.php file via the id parameter. The root cause is unsanitized external input allowing crafted SQL commands, potentially enabling data leakage or modification as described. Remediation and mitigations are m...