Hostel Management System allocate_room.php File SQL Injection Vulnerability

Hostel Management System is a hostel management system. Hostel Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter searchbox in the file /allocateroom.php. An attacker can exploit this...

CVE-2025-6295

A vulnerability was found in code-projects Hostel Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /allocatedrooms.php. The manipulation of the argument searchbox leads to sql injection. The attack can be launched...

CVE-2025-6296

A vulnerability was found in code-projects Hostel Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /emptyrooms.php. The manipulation of the argument searchbox leads to sql injection. The attack may be launched remotely. The...

CVE-2025-6295

A vulnerability was found in code-projects Hostel Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /allocatedrooms.php. The manipulation of the argument searchbox leads to sql injection. The attack can be launched...

CVE-2025-6296

A vulnerability was found in code-projects Hostel Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /emptyrooms.php. The manipulation of the argument searchbox leads to sql injection. The attack may be launched remotely. The...

CVE-2025-6296

CVE-2025-6296 affects code-projects Hostel Management System 1.0. Multiple sources confirm a SQL injection vulnerability in the file /empty_rooms.php caused by lack of validation of the search_box parameter. The issue can be exploited remotely, potentially exposing or altering database data and a...

CVE-2025-6296 code-projects Hostel Management System empty_rooms.php sql injection

A vulnerability was found in code-projects Hostel Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /emptyrooms.php. The manipulation of the argument searchbox leads to sql injection. The attack may be launched remotely. The...

CVE-2025-6295 code-projects Hostel Management System allocated_rooms.php sql injection

A vulnerability was found in code-projects Hostel Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /allocatedrooms.php. The manipulation of the argument searchbox leads to sql injection. The attack can be launched...

CVE-2025-6295

CVE-2025-6295 affects code-projects Hostel Management System 1.0. The vulnerability is an SQL injection in the /allocated_rooms.php file, caused by unsafely using the search_box parameter without proper validation. It can be exploited remotely to access or exfiltrate database data. Multiple conne...

CVE-2025-6295 code-projects Hostel Management System allocated_rooms.php sql injection

A vulnerability was found in code-projects Hostel Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /allocatedrooms.php. The manipulation of the argument searchbox leads to sql injection. The attack can be launched...

CVE-2025-6293

A vulnerability was found in code-projects Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /contactmanager.php. The manipulation of the argument studentrollno leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-6294

A vulnerability was found in code-projects Hostel Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /contact.php. The manipulation of the argument hostelname leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-6293

A vulnerability was found in code-projects Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /contactmanager.php. The manipulation of the argument studentrollno leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-6294

A vulnerability was found in code-projects Hostel Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /contact.php. The manipulation of the argument hostelname leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-6294 code-projects Hostel Management System contact.php sql injection

A vulnerability was found in code-projects Hostel Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /contact.php. The manipulation of the argument hostelname leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-6294

The CVE-2025-6294 entry concerns code-projects Hostel Management System 1.0, where the file /contact.php contains a vulnerability in the hostel_name parameter that allows SQL injection. Multiple sources (NVD, CNVD, Red Hat CVE, CNVD, etc.) confirm remote exploitation and high severity (CRITICAL p...

CVE-2025-6294 code-projects Hostel Management System contact.php sql injection

A vulnerability was found in code-projects Hostel Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /contact.php. The manipulation of the argument hostelname leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-6293 code-projects Hostel Management System contact_manager.php sql injection

A vulnerability was found in code-projects Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /contactmanager.php. The manipulation of the argument studentrollno leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-6293

CVE-2025-6293 affects code-projects Hostel Management System 1.0. A vulnerability exists in the file /contact_manager.php where manipulating the parameter student_roll_no enables SQL injection. Impact is remote exploitation with potential data exposure/manipulation as described in multiple source...

CVE-2025-6293 code-projects Hostel Management System contact_manager.php sql injection

A vulnerability was found in code-projects Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /contactmanager.php. The manipulation of the argument studentrollno leads to sql injection. The attack may be initiated remotely. The exploit...