Approved changes feed: RSS · Atom

cpe:2.3:a:phpgurukul:cyber_cafe_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorPhpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d)
ProductCyber Cafe Management System (fb66109d-097c-5361-a5e0-deaa621b58b6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7165 vulnerable 2026-06-08 07:43:18.079711 PHPGurukul/Campcodes Cyber Cafe Management System forgot-password.php sql injection
HIGH (7.3)
A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-08T06:02:05.515Z
Updated: 2025-07-08T13:44:30.198Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7164 vulnerable 2026-06-08 07:43:18.079118 PHPGurukul/Campcodes Cyber Cafe Management System index.php sql injection
HIGH (7.3)
A vulnerability has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-08T05:32:05.678Z
Updated: 2025-07-08T13:45:36.200Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-70893 vulnerable 2026-06-08 07:43:17.060768 Details available
A time-based blind SQL Injection vulnerability exists in PHPGurukul Cyber Cafe Management System v1.0 within the adminprofile.php endpoint. The application fails to properly sanitize user-supplied input provided via the adminname parameter, allowing authenticated attackers to inject arbitrary SQL expressions.
Published: 2026-01-15T00:00:00.000Z
Updated: 2026-01-15T21:22:19.718Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-70892 vulnerable 2026-06-08 07:43:17.060401 Details available
Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module. The application fails to properly validate user-supplied input in the username parameter of the add-users.php endpoint.
Published: 2026-01-15T00:00:00.000Z
Updated: 2026-01-15T21:25:50.687Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-70891 vulnerable 2026-06-08 07:43:17.060136 Details available
A stored cross-site scripting (XSS) vulnerability exists in Phpgurukul Cyber Cafe Management System v1.0 within the user management module. The application does not properly sanitize or encode user-supplied input submitted via the uadd parameter in the add-users.php endpoint. An authenticated attacker can inject arbitrary JavaScript code that is persistently stored in the database. The malicious payload is triggered when a privileged user clicks the View button on the view-allusers.php page.
Published: 2026-01-15T00:00:00.000Z
Updated: 2026-01-15T21:06:05.340Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-70890 vulnerable 2026-06-08 07:43:17.059715 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5358 vulnerable 2026-06-08 07:35:24.775218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4696 vulnerable 2026-06-08 07:29:17.117212 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4695 vulnerable 2026-06-08 07:29:17.114941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4304 vulnerable 2026-06-08 07:29:16.011605 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4226 vulnerable 2026-06-08 07:29:15.611304 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11390 vulnerable 2026-06-08 07:02:28.691803 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30983 vulnerable 2026-06-08 06:35:30.777989 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30982 vulnerable 2026-06-08 06:35:30.777466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30981 vulnerable 2026-06-08 06:35:30.777003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30980 vulnerable 2026-06-08 06:35:30.776645 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30979 vulnerable 2026-06-08 06:35:30.775051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38920 vulnerable 2026-06-08 06:08:19.140031 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34666 vulnerable 2026-06-08 06:06:25.873897 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29009 vulnerable 2026-06-08 05:42:46.315541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.