Phpgurukul Cyber Cafe Management System vulnerabilities

20 CVEs affecting Phpgurukul Cyber Cafe Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-70893, published 2026-01-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-29009, published 2022-05-11. Critical severity, CVSS 9.8. EPSS: 22.9% chance of exploitation in the next 30 days. Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allows attackers to bypass authentication.
CVE-2024-30980, published 2024-04-17. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. SQL Injection vulnerability in phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0 allows attackers to run arbitrary SQL commands via the Computer Location parameter in manage-computer.php…
CVE-2023-34666, published 2023-06-15. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Phpgurukul Cyber Cafe Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the admin username parameter.
CVE-2025-4304, published 2025-05-06. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in PHPGurukul Cyber Cafe Management System 1.0. This affects an unknown part of the file /adminprofile.php. The manipulation of the…
CVE-2025-4226, published 2025-05-03. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. This affects an unknown part of the file /add-computer.php. The manipulation of the…
CVE-2025-7165, published 2025-07-08. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php.…
CVE-2025-7164, published 2025-07-08. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php.…
CVE-2024-30979, published 2024-04-17. Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days. Cross Site Scripting vulnerability in Cyber Cafe Management System 1.0 allows a remote attacker to execute arbitrary code via the compname parameter in edit-computer-details.php.
CVE-2025-5358, published 2025-05-30. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file…
CVE-2024-30982, published 2024-04-17. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. SQL Injection vulnerability in phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0 allows attackers to run arbitrary SQL commands via the upid parameter in the /view-user-detail.php file.

Latest

CVE-2025-70893, published 2026-01-15. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A time-based blind SQL Injection vulnerability exists in PHPGurukul Cyber Cafe Management System v1.0 within the adminprofile.php endpoint. The application fails to properly sanitize user-supplied…
CVE-2025-70892, published 2026-01-15. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module. The application fails to properly validate user-supplied input in the username…
CVE-2025-70891, published 2026-01-15. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. A stored cross-site scripting (XSS) vulnerability exists in Phpgurukul Cyber Cafe Management System v1.0 within the user management module. The application does not properly sanitize or encode…
CVE-2025-70890, published 2026-01-15. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. A stored cross-site scripting (XSS) vulnerability exists in Cyber Cafe Management System v1.0. An authenticated attacker can inject arbitrary JavaScript code into the username parameter via the…
CVE-2025-11390, published 2025-10-07. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. A weakness has been identified in PHPGurukul Cyber Cafe Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /search.php of the component POST Parameter…
CVE-2025-4696, published 2025-05-15. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file…
CVE-2025-4695, published 2025-05-15. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /add-users.php. The manipulation of…