A security flaw has been discovered in itsourcecode Hostel Management System 1.0. Impacted is an unknown function of the file /justines/index.php of the component POST Request Handler. Performing manipulation of the argument from results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction Passive

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction Required

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction Required

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Exploitation poc

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Itsourcecode
  • Hostel Management System

No data.

No data.

References
Link Providers
https://github.com/iflame28/CVE/issues/1 cve-icon cve-icon cve-icon
https://itsourcecode.com/ cve-icon cve-icon
https://vuldb.com/?ctiid.326200 cve-icon cve-icon
https://vuldb.com/?id.326200 cve-icon cve-icon
https://vuldb.com/?submit.663519 cve-icon cve-icon
History

Mon, 29 Sep 2025 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 29 Sep 2025 09:45:00 +0000

Type Values Removed Values Added
First Time appeared Itsourcecode
Itsourcecode hostel Management System
Vendors & Products Itsourcecode
Itsourcecode hostel Management System

Mon, 29 Sep 2025 06:30:00 +0000

Type Values Removed Values Added
References

Mon, 29 Sep 2025 06:00:00 +0000

Type Values Removed Values Added
References

Sun, 28 Sep 2025 20:45:00 +0000

Type Values Removed Values Added
Description A security flaw has been discovered in itsourcecode Hostel Management System 1.0. Impacted is an unknown function of the file /justines/index.php of the component POST Request Handler. Performing manipulation of the argument from results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.
Title itsourcecode Hostel Management System POST Request index.php cross site scripting
Weaknesses CWE-79
CWE-94
References
Metrics cvssV2_0

{'score': 5, 'vector': 'AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 4.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P'}
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2025-09-29T14:07:06.147Z

Reserved: 2025-09-27T17:44:22.340Z

Link: CVE-2025-11119

cve-icon Vulnrichment

Updated: 2025-09-29T14:06:54.206Z

cve-icon NVD

Status : Undergoing Analysis

Published: 2025-09-28T21:15:50.617

Modified: 2025-09-29T19:34:10.030

Link: CVE-2025-11119

cve-icon Redhat

No data.