CVE-2025-8964: medium-severity vulnerability in code-projects Hostel Management System
code-projects Hostel Management System Login hostel_manage.exe improper authentication
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.8epss 0.3%
A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostel_manage.exe of the component Login. The manipulation leads to improper authentication. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
code-projects · Hostel Management SystemRelated CVEs — code-projects Hostel Management System
In the same product, most dangerous first.
CVE-2025-10811MEDIUMcode-projects Hostel Management System index.php sql injectionEPSS 0.7%CVE-2024-13012MEDIUMcode-projects Hostel Management System registration.php cross site scriptingEPSS 0.5%CVE-2025-6296MEDIUMcode-projects Hostel Management System empty_rooms.php sql injectionEPSS 0.5%CVE-2025-6295MEDIUMcode-projects Hostel Management System allocated_rooms.php sql injectionEPSS 0.5%CVE-2025-6294MEDIUMcode-projects Hostel Management System contact.php sql injectionEPSS 0.5%CVE-2025-6293MEDIUMcode-projects Hostel Management System contact_manager.php sql injectionEPSS 0.5%
References
https://code-projects.org/https://vuldb.com/?ctiid.319959https://vuldb.com/?id.319959https://vuldb.com/?submit.628030https://www.yuque.com/gongzi-jsnek/xb2q3a/ip83oyxdztulfuzx?singleDochttps://www.yuque.com/gongzi-jsnek/xb2q3a/ip83oyxdztulfuzx?singleDoc#https://www.yuque.com/gongzi-jsnek/xb2q3a/ip83oyxdztulfuzx#vulnerability-details-and-poc