CVE-2025-10796: code-projects Hostel Management System login.php sql injection

Published Sep 22, 2025

Updated

A vulnerability was found in code-projects Hostel Management System 1.0. This vulnerability affects unknown code of the file /justines/admin/login.php. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.

Affected Software

2 affected components

Code-projects Hostel Management System

Angeljudesuarez Hostel Management System=1.0

Event History

Sep 22, 2025

CVE Published

via MITRE·11:32 AM

Data Sourced

via MITRE·11:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeaknessAffected Software

Sep 4, 58718

Event

via NVD·12:16 PM

Frequently Asked Questions

What is the severity of CVE-2025-10796?

CVE-2025-10796 is classified as a critical vulnerability due to its potential for remote SQL injection.

How do I fix CVE-2025-10796?

To fix CVE-2025-10796, sanitize and validate user inputs, particularly in the email parameter of the login.php file.

What software is affected by CVE-2025-10796?

CVE-2025-10796 affects version 1.0 of the Code-projects Hostel Management System.

Can CVE-2025-10796 be exploited remotely?

Yes, CVE-2025-10796 can be exploited remotely due to the SQL injection vulnerability.

What type of vulnerability is CVE-2025-10796?

CVE-2025-10796 is an SQL injection vulnerability found in the login functionality of the Hostel Management System.