7.6
High
CVE-2025-39566 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Hostel…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Hostel hostel allows Blind SQL Injection.This issue affects Hostel: from n/a through <= 1.1.5.6.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Hostel 1.1 | earliest → 1.1.5.6 | No fix stated |
Other CVEs of Hostel
The 5 CVEs of Hostel →
CVE-2023-32120
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bob…
5.9
Medium
CVE-2025-66119
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Hostel…
7.1
High
CVE-2025-30848
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Hostel…
7.1
High
CVE-2025-31102
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Hostel…
7.1
High