CVE Catalog
CVE-2025-70892
CriticalSummary
Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module. The application fails to properly validate user-supplied input in the username parameter of the add-users.php endpoint.
Risk Assessment
An attacker could exploit the vulnerability to gain unauthorized access to the database, steal or modify data.
Recommendation
It is recommended to immediately update the system to the latest version and implement input validation and parameterized queries.
Original NVD description (English source)
Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module. The application fails to properly validate user-supplied input in the username parameter of the add-users.php endpoint.