CVE-2025-8964mediumCWE-287

CVE-2025-8964: fallo de gravedad media en code-projects Hostel Management System

code-projects Hostel Management System Login hostel_manage.exe improper authentication

Publicada el

Seguir esta CVE+ Monitorear Hostel Management System

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 4.8epss 0.3%
A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostel_manage.exe of the component Login. The manipulation leads to improper authentication. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
code-projects · Hostel Management System
CVEs relacionadas — code-projects Hostel Management System

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-10811MEDIUMcode-projects Hostel Management System index.php sql injectionEPSS 0.7%CVE-2024-13012MEDIUMcode-projects Hostel Management System registration.php cross site scriptingEPSS 0.5%CVE-2025-6296MEDIUMcode-projects Hostel Management System empty_rooms.php sql injectionEPSS 0.5%CVE-2025-6295MEDIUMcode-projects Hostel Management System allocated_rooms.php sql injectionEPSS 0.5%CVE-2025-6294MEDIUMcode-projects Hostel Management System contact.php sql injectionEPSS 0.5%CVE-2025-6293MEDIUMcode-projects Hostel Management System contact_manager.php sql injectionEPSS 0.5%