CVE-2023-34666

MEDIUM

Phpgurukul Cyber Cafe Management System - XSS

Title source: rule
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in Phpgurukul Cyber Cafe Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the admin username parameter.

Exploits (1)

exploitdb WRITEUP
by Pruthvi Nekkanti · textwebappsphp
https://www.exploit-db.com/exploits/49204

Scores

CVSS v3 6.1
EPSS 0.0010
EPSS Percentile 27.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-79
Status published
Products (1)
phpgurukul/cyber_cafe_management_system 1.0
Published Jun 15, 2023
Tracked Since Feb 18, 2026