CVE-2025-10812: code-projects Hostel Management System index.php sql injection

Published Sep 22, 2025

Updated

A vulnerability has been found in code-projects Hostel Management System 1.0. This impacts an unknown function of the file /justines/admin/modamenities/index.php?view=view. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Hostel Management System

Angeljudesuarez Hostel Management System=1.0

Event History

Sep 22, 2025

CVE Published

via MITRE·07:32 PM

Data Sourced

via MITRE·07:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10812?

CVE-2025-10812 is rated as a high-severity vulnerability due to its potential for SQL injection attacks.

How do I fix CVE-2025-10812?

To fix CVE-2025-10812, sanitize and validate the ID parameter in the /justines/admin/mod_amenities/index.php file to prevent SQL injection.

What systems are affected by CVE-2025-10812?

CVE-2025-10812 affects code-project's Hostel Management System version 1.0.

Can CVE-2025-10812 be exploited remotely?

Yes, CVE-2025-10812 can be exploited remotely by manipulating the ID parameter.

What are the potential consequences of exploiting CVE-2025-10812?

Exploiting CVE-2025-10812 may allow attackers to execute arbitrary SQL queries, leading to data exposure or corruption.