CVE-2024-12790

CVE-2024-12790 affects Code-Projects Hostel Management Site 1.0; the vulnerability is a cross-site scripting issue in unknown parts of room-details.php. Remote exploitation is possible, and public disclosures exist. No patch/version fix details are provided in the documents; a known mitigation is...

CVE-2024-13012

CVE-2024-13012 affects code-projects Hostel Management System 1.0. The vulnerability arises from manipulation of the arguments in /admin/registration.php (fname, mname, lname), leading to cross-site scripting (XSS). Several connected sources confirm remote initiation without further details on ex...

CVE-2025-8962

The CVE-2025-8962 entry affects code-projects Hostel Management System 1.0, specifically the hostel_manage.exe component in the Login Form. The root cause is a stack-based buffer overflow caused by manipulating the uname argument, with local access required for exploitation. Public exploitation h...

CVE-2025-6159

The CVE-2025-6159 entry concerns code-projects’ Hostel Management System 1.0. A SQL injection vulnerability exists in the /allocate_room.php endpoint via the search_box parameter, allowing remote attackers to manipulate SQL statements and potentially access sensitive database data. Multiple conne...

CVE-2025-6294

The CVE-2025-6294 entry concerns code-projects Hostel Management System 1.0, where the file /contact.php contains a vulnerability in the hostel_name parameter that allows SQL injection. Multiple sources (NVD, CNVD, Red Hat CVE, CNVD, etc.) confirm remote exploitation and high severity (CRITICAL p...

CVE-2025-6295

CVE-2025-6295 affects code-projects Hostel Management System 1.0. The vulnerability is an SQL injection in the /allocated_rooms.php file, caused by unsafely using the search_box parameter without proper validation. It can be exploited remotely to access or exfiltrate database data. Multiple conne...

CVE-2025-6296

CVE-2025-6296 affects code-projects Hostel Management System 1.0. Multiple sources confirm a SQL injection vulnerability in the file /empty_rooms.php caused by lack of validation of the search_box parameter. The issue can be exploited remotely, potentially exposing or altering database data and a...

CVE-2025-6293

CVE-2025-6293 affects code-projects Hostel Management System 1.0. A vulnerability exists in the file /contact_manager.php where manipulating the parameter student_roll_no enables SQL injection. Impact is remote exploitation with potential data exposure/manipulation as described in multiple source...

CVE-2025-8964

CVE-2025-8964 affects code-projects’ Hostel Management System 1.0, specifically the Login component via the hostel_manage.exe file. The vulnerability is described as improper authentication, enabling a local-host attack. The PT-2025-33299 entry confirms the issue and states the exploit has been p...