Hostel Management System CVE-2025-6159

The CVSS 3.1 score of 7.3 with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L indicates a high-severity vulnerability with significant real-world risk. The attack vector is network-based (AV:N) with low attack complexity (AC:L), requires no privileges (PR:N), and needs no user interaction (UI:N), making exploitation trivial for any attacker with network access. The confidentiality, integrity, and availability impacts are all present (C:L/I:L/A:L), though rated as 'Low' individually, the combination creates substantial risk. The public disclosure and available proof-of-concept code elevate this from theoretical to practical threat. This is NOT a low-real-risk-high-CVSS issue; the CVSS rating accurately reflects genuine exploitability. Organizations running Hostel Management System 1.0 face immediate risk of data breach, unauthorized modifications to room allocations and guest records, and potential denial of service. The lack of authentication requirements makes this a critical priority for patching.

An attacker identifies a publicly accessible Hostel Management System 1.0 instance and navigates to the room allocation interface. They craft a malicious request to /allocate_room.php with a search_box parameter containing SQL injection payload, such as: search_box=1' OR '1'='1' UNION SELECT user, password FROM admin_users--. Since the application lacks input validation and directly incorporates this into a SQL query (e.g., SELECT * FROM rooms WHERE name LIKE '%{search_box}%'), the injected SQL executes on the backend database. This allows the attacker to: (a) extract sensitive data including guest information, room assignments, and administrative credentials; (b) modify room allocations or guest records; (c) execute administrative commands via database-level functionality. The attack requires no authentication, no social engineering, and can be automated for reconnaissance across multiple targets. With public POC code available, even low-skilled attackers can successfully exploit this vulnerability within minutes of discovering a vulnerable instance.