CVE-2022-29009

CVE-2022-29009 applies to Cyber Cafe Management System Project v1.0 (CCMS). The NVD/Nuclei and related CVE records describe multiple SQL injection vulnerabilities in the Admin panel, exploitable via the username and password parameters, which can allow an attacker to bypass authentication and pot...

CVE-2024-30981

CVE-2024-30981 affects phpgurukul Cyber Cafe Management System Using PHP & MySQL v1.0, where the parameter editid in the endpoint /edit-computer-detail.php is susceptible to SQL injection. Multiple connected sources consistently describe an ability for attackers to execute arbitrary SQL commands ...

CVE-2024-30982

The phpgurukul Cyber Cafe Management System Using PHP & MySQL version 1.0 is affected by an SQL Injection vulnerability. The flaw exists because the /view-user-detail.php file fails to properly neutralize special elements in the upid parameter, allowing an attacker to execute arbitrary SQL comman...

CVE-2023-38920

A Cross-Site Scripting (XSS) vulnerability exists in Cyber Cafe Management System (CCMS) v.1.0 , developed by Anuj Kumar. The flaw allows a local attacker to execute arbitrary code by submitting a crafted script via the adminname parameter. This issue stems from the improper neutralization of inp...

CVE-2024-30979

The Cyber Cafe Management System version 1.0 contains a Cross-Site Scripting (XSS) vulnerability. A remote attacker can exploit the compname parameter within the edit-computer-details.php endpoint to execute arbitrary code. To mitigate this risk, it is recommended to avoid using the compname para...

CVE-2025-4226

CVE-2025-4226 affects PHPGurukul/Campcodes Cyber Cafe Management System 1.0. The vulnerability is a SQL injection in add-computer.php triggered by manipulating the compname/comploc parameters, exploitable remotely. Multiple sources confirm the issue and public disclosure; several advisories refer...

CVE-2023-34666

CVE-2023-34666 - Phpgurukul Cyber Cafe Management System 1.0 suffers a cross-site scripting (XSS) flaw where remote attackers can inject arbitrary script/HTML via the admin username parameter. The vulnerability affects version 1.0 of the Phpgurukul Cyber Cafe Management System and is caused by in...

CVE-2024-30980

The phpgurukul Cyber Cafe Management System Using PHP & MySQL version 1.0 is vulnerable to an SQL Injection vulnerability. The flaw exists in the manage-computer.php page, where the Computer Location parameter is improperly neutralized. This allows an attacker to execute arbitrary SQL commands , ...

CVE-2024-30983

The phpgurukul Cyber Cafe Management System Using PHP & MySQL version 1.0 is vulnerable to an SQL Injection vulnerability. An attacker can execute arbitrary SQL commands by providing malicious input via the compname parameter in the /edit-computer-detail.php file. This flaw allows for unauthorize...

CVE-2025-4304

The CVE-2025-4304 entry concerns PHPGurukul Cyber Cafe Management System 1.0, where the parameter mobilenumber in /adminprofile.php is vulnerable to SQL injection. Multiple connected reports confirm remote exploitation and that the exploit has been disclosed publicly, enabling data-theft in the a...

CVE-2025-5358

CVE-2025-5358 affects PHPGurukul/Campcodes Cyber Cafe Management System 1.0. The file /bwdates-reports-details.php processes fromdate and todate; manipulation of these parameters leads to SQL injection. The vulnerability is exploitable remotely and has been disclosed publicly. Several sources con...

CVE-2025-4695

CVE-2025-4695 affects PHPGurukul/Campcodes Cyber Cafe Management System 1.0. The vulnerability is an SQL injection in the /add-users.php file, caused by unsafely handling the uadd parameter. Several sources describe remote exploitation and public disclosure. Impact is described as high confidenti...

CVE-2025-4696

The CVE-2025-4696 vulnerability affects PHPGurukul/Campcodes Cyber Cafe Management System v1.0, specifically the file /search.php. The root cause is lack of input validation on the searchdata parameter, enabling SQL injection. This can be exploited remotely; multiple sources indicate the exploit ...

CVE-2025-70893

A time-based blind SQL Injection vulnerability exists in PHPGurukul Cyber Cafe Management System v1.0 . The flaw occurs in the adminprofile.php endpoint because the application fails to properly sanitize user-supplied input provided via the adminname parameter. This allows authenticated attackers...

CVE-2025-7165

Vulnerability overview: CVE-2025-7165 affects PHPGurukul/Campcodes Cyber Cafe Management System 1.0. The flaw is a SQL injection in the /forgot-password.php endpoint triggered by manipulating the email parameter. This vulnerability is exploitable remotely (network vector) with no authentication, ...

CVE-2025-7164

CVE-2025-7164 affects PHPGurukul/Campcodes Cyber Cafe Management System 1.0. The vulnerability is in /index.php via the Username parameter, allowing SQL injection. It can be exploited remotely and is described with high severity (NVD CVSSv3.1 base score 9.8; also cited as high/critical in other f...

CVE-2025-11390

Summary of CVE-2025-11390 impact : PHPGurukul Cyber Cafe Management System 1.0 contains a cross-site scripting vulnerability in the POST Parameter Handler’s /search.php file, caused by unsafely handling the searchdata parameter. Exploitation can be conducted remotely and public exploits exist. Th...

CVE-2025-70891

A stored cross-site scripting (XSS) vulnerability exists in Phpgurukul Cyber Cafe Management System v1.0 within the user management module. The root cause is the failure to properly sanitize or encode user-supplied input submitted via the uadd parameter in the add-users.php endpoint. An authentic...

CVE-2025-70892

The Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability (CWE-89) within its user management module. The root cause is the failure to adequately validate or sanitize user-supplied input in the username parameter at the add-users.php endpoint. This flaw allows an att...

CVE-2025-70890

A stored cross-site scripting (XSS) vulnerability exists in Cyber Cafe Management System v1.0 . An authenticated attacker can inject arbitrary JavaScript code into the username parameter via the add-users.php endpoint. The malicious payload is stored and subsequently executed in the victim's brow...