CVE-2023-34666

MediumCVSS 6.1

Published: 15/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.67%

47th percentile - higher than 47% of all known CVEs

Summary

The Phpgurukul Cyber Cafe Management System version 1.0 has a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web scripts or HTML via the admin username parameter.

Risk Assessment

This vulnerability could lead to session hijacking of the administrator or theft of user data, posing a serious security threat to the system.

Recommendation

It is recommended to update the system to the latest version and implement input validation and sanitization to minimize the risk of XSS attacks.

Original NVD description (English source)

Cross-site scripting (XSS) vulnerability in Phpgurukul Cyber Cafe Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the admin username parameter.