CVE-2025-6293: code-projects Hostel Management System contact_manager.php sql injection
A vulnerability was found in code-projects Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /contactmanager.php. The manipulation of the argument studentrollno leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6293?
CVE-2025-6293 is classified as a critical severity vulnerability.
How does CVE-2025-6293 affect the Hostel Management System?
CVE-2025-6293 allows for SQL injection through improper handling of the student_roll_no argument in the /contact_manager.php file.
How can I fix CVE-2025-6293?
To mitigate CVE-2025-6293, sanitize user inputs and use parameterized queries in the database interactions.
Who is affected by CVE-2025-6293?
CVE-2025-6293 affects users of the Hostel Management System version 1.0.
Can CVE-2025-6293 be exploited remotely?
Yes, CVE-2025-6293 can be exploited remotely by attackers.