PT-2025-40936 · Phpgurukul · Phpgurukul Hospital Management System

Published 2025-10-06 · Updated 2025-10-21 · CVE-2025-28129

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Phpgurukul Hostel Management System version 2.1

Description The Phpgurukul Hostel Management System version 2.1 is susceptible to clickjacking. This allows an attacker to trick a user into performing actions they did not intend to perform. The system is vulnerable because it does not implement sufficient protections against malicious websites embedding it within an iframe and misleading users.

Recommendations Apply appropriate anti-clickjacking measures, such as adding the X-Frame-Options header to prevent the system from being embedded in an iframe.

Exploit

Fix

Clickjacking

Weakness Enumeration

CWE-1021

Related Identifiers

CVE-2025-28129

Affected Products

Phpgurukul Hospital Management System

References · 7

• 🔥 https://github.com/NullMinds/CVE-Hunting/blob/main/Hostel%20Management%20System%20in%20PHP/Clickjacking.pdf · Exploit
• https://osv.dev/vulnerability/CVE-2025-28129 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-28129 · Security Note
• https://twitter.com/CVEnew/status/1975265348199788824 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1975283809189797972 · Twitter Post
• https://t.me/CVEtracker/34267 · Telegram Post
• https://t.me/cveNotify/139694 · Telegram Post