dormitory-management-php vulnerabilities

2 known vulnerabilities in dormitory-management-php from Surbowl. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  dormitory-management-php: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2025-9150Aug 19, 2025Surbowl

  A vulnerability was identified in Surbowl dormitory-management-php up to 9f1d9d1f528cabffc66fda3652c56ff327fda317. Affected is an unknown function of the file /admin/violation_add.php?id=2. Such manipulation of the argument ID leads to sql injection. The attac

• 9.8 Critical severity

  dormitory-management-php: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-9002Aug 15, 2025Surbowl

  A vulnerability was identified in Surbowl dormitory-management-php 1.0. This affects an unknown part of the file login.php. The manipulation of the argument Account leads to sql injection. It is possible to initiate the attack remotely. The exploit has been di