Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2023-36939
Disclosure Date: July 10, 2023 (last updated November 15, 2023)
Cross-Site Scripting (XSS) vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the search booking field.
0
Attacker Value
Unknown
CVE-2023-36375
Disclosure Date: July 10, 2023 (last updated November 15, 2023)
Cross Site Scripting vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the Guardian name, Guardian relation, complimentary address, city, permanent address, and city parameters in the Book Hostel & Room Details page.
0
Attacker Value
Unknown
CVE-2023-36376
Disclosure Date: July 10, 2023 (last updated November 15, 2023)
Cross-Site Scripting (XSS) vulnerability in Hostel Management System v.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the add course section.
0
Attacker Value
Unknown
CVE-2021-43137
Disclosure Date: December 01, 2021 (last updated February 23, 2025)
Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exits in hostel management system 2.1 via the name field in my-profile.php. Chaining to this both vulnerabilities leads to account takeover.
0
Attacker Value
Unknown
CVE-2020-25270
Disclosure Date: October 08, 2020 (last updated February 22, 2025)
PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City.
0
