CVE-2023-34666
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
The Phpgurukul Cyber Cafe Management System version 1.0 has a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web scripts or HTML via the admin username parameter.
Risk Assessment
This vulnerability could lead to session hijacking of the administrator or theft of user data, posing a serious security threat to the system.
Recommendation
It is recommended to update the system to the latest version and implement input validation and sanitization to minimize the risk of XSS attacks.
Other vulnerabilities in Phpgurukul Cyber Cafe Management System 1.0
See all- CVE-2025-70893High
A time-based blind SQL Injection vulnerability exists in PHPGurukul Cyber Cafe Management System v1.0 within the adminprofile.php endpoint. The application fails to properly sanitize user-supplied input provided via the adminname parameter, allowing authenticated attackers to inject arbitrary SQL expressions.
- CVE-2025-70892Critical
Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module. The application fails to properly validate user-supplied input in the username parameter of the add-users.php endpoint.
Original NVD description (English source)
Cross-site scripting (XSS) vulnerability in Phpgurukul Cyber Cafe Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the admin username parameter.