CVE-2025-70892
CRITICALPhpgurukul Cyber Cafe Management System - SQL Injection
Title source: ruleDescription
Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module. The application fails to properly validate user-supplied input in the username parameter of the add-users.php endpoint.
Scores
CVSS v3
9.8
EPSS
0.0002
EPSS Percentile
4.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-89
Status
published
Affected Products (1)
phpgurukul/cyber_cafe_management_system
Timeline
Published
Jan 15, 2026
Tracked Since
Feb 18, 2026