Lucene search
+L

53 matches found

NVD
NVD
•added 2026/09/15 2:16 a.m.•12 views

CVE-2026-90850

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used...

4.8CVSS0.00368EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/15 2:16 a.m.•8 views

CVE-2026-90851

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be...

6.5CVSS0.00366EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/15 2:00 a.m.•31 views

CVE-2026-90851 PHPGurukul Hostel Management System checklogin.php access control

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be...

6.5CVSS0.00366EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/15 2:00 a.m.•15 views

EUVD-2026-78253

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be...

6.5CVSS6.3AI score0.00366EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/15 2:00 a.m.•7 views

CVE-2026-90851 PHPGurukul Hostel Management System checklogin.php access control

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be...

6.5CVSS6.3AI score0.00366EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/15 1:45 a.m.•12 views

EUVD-2026-78252

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used...

4.8CVSS3.7AI score0.00368EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/15 1:45 a.m.•6 views

CVE-2026-90850 PHPGurukul Hostel Management System manage-students.php cross site scripting

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used...

4.8CVSS3.7AI score0.00368EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/15 1:45 a.m.•32 views

CVE-2026-90850 PHPGurukul Hostel Management System manage-students.php cross site scripting

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used...

4.8CVSS0.00368EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/15 1:45 a.m.•14 views

CVE-2026-90850

CVE-2026-90850 affects PHPGurukul Hostel Management System 3.0 , specifically an unspecified function in the file /admin/manage-students.php . The vulnerability enables cross-site scripting (XSS) via remote manipulation. Exploitation requires high privileges (authenticated admin-level access) and...

4.8CVSS3.7AI score0.00368EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•13 views

PT-2026-91846

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be...

6.5CVSS6.3AI score0.00366EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•0 views

CVE-2026-90851: Improper Access Control

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be...

6.5CVSS5.4AI score0.00366EPSS
SaveExploits0References3
NVD
NVD
•added 2026/01/08 4:15 p.m.•14 views

CVE-2025-63611

Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields Explain the Complaint submitted via /register-complaint.php are stored and rendered unescaped in the admin viewer /admin/complaint-details.php?cid=. When an administrator opens the complaint, injected...

8.7CVSS0.00305EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/01/08 12:00 a.m.•9 views

PHPGurukul Hostel Management System 安全漏洞

PHPGurukul Hostel Management System is a hostel management system from PHPGurukul. A security vulnerability exists in version 2.1 of the PHPGurukul Hostel Management System, which originates from a user-entered error in the file /register-complaint.php and could lead to a stored cross-site...

8.7CVSS5.9AI score0.00305EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/01/08 12:00 a.m.•40 views

CVE-2025-63611

Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields Explain the Complaint submitted via /register-complaint.php are stored and rendered unescaped in the admin viewer /admin/complaint-details.php?cid=. When an administrator opens the complaint, injected...

0.00305EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/08 12:00 a.m.•0 views

CVE-2025-63611: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields Explain the Complaint submitted via /register-complaint.php are stored and rendered unescaped in the admin viewer /admin/complaint-details.php?cid= . When an administrator opens the complaint, injected...

8.7CVSS5.8AI score0.00305EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/25 1:33 a.m.•30 views

CVE-2025-13577

A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a manipulation of the argument cdetails can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.4CVSS3.4AI score0.00217EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/24 2:15 a.m.•19 views

CVE-2025-13577

A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a manipulation of the argument cdetails can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.4CVSS4.2AI score0.00217EPSS
SaveExploits0References4
NVD
NVD
•added 2025/11/24 2:15 a.m.•20 views

CVE-2025-13577

A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a manipulation of the argument cdetails can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.4CVSS0.00217EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/11/24 1:32 a.m.•6 views

CVE-2025-13577 PHPGurukul Hostel Management System register-complaint.php cross site scripting

A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a manipulation of the argument cdetails can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.1CVSS3.4AI score0.00217EPSS
SaveExploits0References4
CVE
CVE
•added 2025/11/24 1:32 a.m.•39 views

CVE-2025-13577

The CVE-2025-13577 entry concerns PHPGurukul Hostel Management System 2.1, where the /register-complaint.php file’s cdetails parameter is vulnerable to cross-site scripting due to insufficient input filtering/escaping. Multiple connected sources (CNVD, RH/Red Hat, CNNVD, CVE listings) confirm rem...

5.4CVSS3.4AI score0.00217EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder