CVE-2025-8964: falha de média gravidade em code-projects Hostel Management System
code-projects Hostel Management System Login hostel_manage.exe improper authentication
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.8epss 0.3%
A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostel_manage.exe of the component Login. The manipulation leads to improper authentication. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
code-projects · Hostel Management SystemCVEs relacionadas — code-projects Hostel Management System
No mesmo produto, das mais perigosas para as menos.
CVE-2025-10811MEDIUMcode-projects Hostel Management System index.php sql injectionEPSS 0.7%CVE-2024-13012MEDIUMcode-projects Hostel Management System registration.php cross site scriptingEPSS 0.5%CVE-2025-6296MEDIUMcode-projects Hostel Management System empty_rooms.php sql injectionEPSS 0.5%CVE-2025-6295MEDIUMcode-projects Hostel Management System allocated_rooms.php sql injectionEPSS 0.5%CVE-2025-6294MEDIUMcode-projects Hostel Management System contact.php sql injectionEPSS 0.5%CVE-2025-6293MEDIUMcode-projects Hostel Management System contact_manager.php sql injectionEPSS 0.5%
Referências
https://code-projects.org/https://vuldb.com/?ctiid.319959https://vuldb.com/?id.319959https://vuldb.com/?submit.628030https://www.yuque.com/gongzi-jsnek/xb2q3a/ip83oyxdztulfuzx?singleDochttps://www.yuque.com/gongzi-jsnek/xb2q3a/ip83oyxdztulfuzx?singleDoc#https://www.yuque.com/gongzi-jsnek/xb2q3a/ip83oyxdztulfuzx#vulnerability-details-and-poc