PHPGurukul Cyber Cafe Management System vulnerabilities

A time-based blind SQL Injection vulnerability exists in PHPGurukul Cyber Cafe Management System v1.0 within the adminprofile.php endpoint. The application fails to properly sanitize user-supplied input provided via the adminname parameter, allowing authenticated attackers to inject arbitrary SQL expressions.

Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module. The application fails to properly validate user-supplied input in the username parameter of the add-users.php endpoint.

A weakness in PHPGurukul Cyber Cafe Management System 1.0 in /search.php (POST Parameter Handler) allows manipulation of the searchdata argument leading to cross-site scripting. The attack can be executed remotely, and the exploit is publicly available.

The Phpgurukul Cyber Cafe Management System version 1.0 has a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web scripts or HTML via the admin username parameter.