Skip to main content

Hostel Management System CVE-2025-8962

LOW
Buffer Overflow (CWE-119)
2025-08-14 cna@vuldb.com
1.9
CVSS 4.0 · NVD

Severity by source

NVD PRIMARY
1.9 LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

5
Severity Changed
Apr 29, 2026 - 01:11 NVD
MEDIUM LOW
CVSS changed
Apr 29, 2026 - 01:11 NVD
4.8 (MEDIUM) 1.9 (LOW)
Analysis Generated
Mar 28, 2026 - 19:06 vuln.today
PoC Detected
Aug 19, 2025 - 18:53 vuln.today
Public exploit code
CVE Published
Aug 14, 2025 - 15:15 nvd
MEDIUM 4.8

DescriptionCVE.org

A vulnerability was found in code-projects Hostel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file hostel_manage.exe of the component Login Form. The manipulation of the argument uname leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

AnalysisAI

A vulnerability was found in code-projects Hostel Management System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. A vulnerability was found in code-projects Hostel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file hostel_manage.exe of the component Login Form. The manipulation of the argument uname leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Affected products include: Fabian Hostel Management System.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.

CVE-2020-5510 CRITICAL POC
9.8 Jan 08

PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file. Rated c

CVE-2025-45953 CRITICAL POC
9.1 Apr 28

A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user

CVE-2021-43137 HIGH POC
8.8 Dec 01

Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exits in hostel management system 2.1 via

CVE-2025-63611 HIGH POC
8.7 Jan 08

Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the Complaint)

CVE-2024-2481 MEDIUM POC
6.5 Mar 15

A vulnerability, which was classified as critical, was found in Surya2Developer Hostel Management System 1.0. Rated medi

CVE-2023-36939 MEDIUM POC
6.1 Jul 10

Cross-Site Scripting (XSS) vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code v

CVE-2025-6159 MEDIUM POC
5.5 Jun 17

Critical SQL injection vulnerability in code-projects Hostel Management System version 1.0, specifically in the /allocat

CVE-2025-6155 MEDIUM POC
5.5 Jun 17

Critical SQL injection vulnerability in PHPGurukul Hostel Management System 1.0 affecting the login functionality (/incl

CVE-2025-6154 MEDIUM POC
5.5 Jun 17

A SQL injection vulnerability in A vulnerability (CVSS 7.3). Risk factors: public PoC available.

CVE-2025-6153 MEDIUM POC
5.5 Jun 17

A SQL injection vulnerability in A vulnerability (CVSS 7.3). Risk factors: public PoC available.

CVE-2025-6296 MEDIUM POC
5.5 Jun 20

CVE-2025-6296 is a critical SQL injection vulnerability in code-projects Hostel Management System version 1.0, specifica

CVE-2025-6295 MEDIUM POC
5.5 Jun 20

A SQL injection vulnerability in A vulnerability (CVSS 7.3). Risk factors: public PoC available.

Share

CVE-2025-8962 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy