CVE-2025-70892
CriticalSummary
Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module. The application fails to properly validate user-supplied input in the username parameter of the add-users.php endpoint.
Risk Assessment
An attacker could exploit the vulnerability to gain unauthorized access to the database, steal or modify data.
Recommendation
It is recommended to immediately update the system to the latest version and implement input validation and parameterized queries.
Other vulnerabilities in Phpgurukul Cyber Cafe Management System
See all- CVE-2025-70893High
A time-based blind SQL Injection vulnerability exists in PHPGurukul Cyber Cafe Management System v1.0 within the adminprofile.php endpoint. The application fails to properly sanitize user-supplied input provided via the adminname parameter, allowing authenticated attackers to inject arbitrary SQL expressions.
- CVE-2023-34666Medium
The Phpgurukul Cyber Cafe Management System version 1.0 has a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web scripts or HTML via the admin username parameter.
Original NVD description (English source)
Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module. The application fails to properly validate user-supplied input in the username parameter of the add-users.php endpoint.