Login Request a demo
HM
Product
Hostel Management System
by PHPGurukul · last CVE Sep 15, 2026
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 5High 2Medium 9Low 1
Severity
All severities17Critical5High2Medium9Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Hostel Management System to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-6155
9.8
1%
Jun 17
PHPGurukul Hostel Management System login-hm.inc.php sql injection
Affected: 1.0
CVE-2025-6154
9.8
1%
Jun 17
PHPGurukul Hostel Management System login.inc.php sql injection
Affected: 1.0
CVE-2025-6153
9.8
1%
Jun 17
PHPGurukul Hostel Management System students.php sql injection
Affected: 1.0
CVE-2020-5510
9.8
2%
Jan 8
PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file
Affected: 2.0
CVE-2025-45953
9.1
0%
Apr 28
A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component
Affected: 2.1
CVE-2021-43137
8.8
1%
Dec 1
Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exits in hostel management system 2.1 via the name field in my-profile.php
Affected: 2.1
CVE-2025-63611
8.7
0%
Jan 8
Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the Complaint) submitted via /register-complaint.php are stored and…
Affected: 2.1
CVE-2026-90851
6.3
0%
Sep 15
PHPGurukul Hostel Management System checklogin.php access control
Affected: 3.0
CVE-2023-36939
6.1
1%
Jul 10
Cross-Site Scripting (XSS) vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the search booking field
Affected: 2.1
CVE-2023-34647
6.1
0%
Jun 28
PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS)
Affected: 1.0
CVE-2023-34652
6.1
0%
Jun 28
PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS) via Add New Course
Affected: 1.0
CVE-2025-13577
5.4
0%
Nov 24
PHPGurukul Hostel Management System register-complaint.php cross site scripting
Affected: 2.1
CVE-2025-28129
5.4
0%
Oct 6
Phpgurukul Hostel Management System 2.1 is vulnerable to clickjacking
Affected: 2.1
CVE-2023-36375
5.4
1%
Jul 10
Cross Site Scripting vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the Guardian name, Guardian relation,…
Affected: 2.1
CVE-2020-25270
5.4
3%
Oct 8
PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City
Affected: 2.1
CVE-2023-36376
4.8
1%
Jul 10
Cross-Site Scripting (XSS) vulnerability in Hostel Management System v.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the add…
Affected: 2.1
CVE-2026-90850
2.4
0%
Sep 15
PHPGurukul Hostel Management System manage-students.php cross site scripting
Affected: 3.0
Showing 17