CVE-2022-29009

CVE-2022-29009 applies to Cyber Cafe Management System Project v1.0 (CCMS). The NVD/Nuclei and related CVE records describe multiple SQL injection vulnerabilities in the Admin panel, exploitable via the username and password parameters, which can allow an attacker to bypass authentication and pot...

CVE-2025-4304

The CVE-2025-4304 entry concerns PHPGurukul Cyber Cafe Management System 1.0, where the parameter mobilenumber in /adminprofile.php is vulnerable to SQL injection. Multiple connected reports confirm remote exploitation and that the exploit has been disclosed publicly, enabling data-theft in the a...

CVE-2024-30982

CVE-2024-30982 describes a SQL injection in the phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0, exploitable via the upid parameter in /view-user-detail.php to run arbitrary SQL. Reported impact includes potential data exposure/modification. Mitigation from PT-2024-23704 suggests di...

CVE-2023-34666

CVE-2023-34666 - Phpgurukul Cyber Cafe Management System 1.0 suffers a cross-site scripting (XSS) flaw where remote attackers can inject arbitrary script/HTML via the admin username parameter. The vulnerability affects version 1.0 of the Phpgurukul Cyber Cafe Management System and is caused by in...

CVE-2024-30981

CVE-2024-30981 affects phpgurukul Cyber Cafe Management System Using PHP & MySQL v1.0, where the parameter editid in the endpoint /edit-computer-detail.php is susceptible to SQL injection. Multiple connected sources consistently describe an ability for attackers to execute arbitrary SQL commands ...

CVE-2025-4226

CVE-2025-4226 affects PHPGurukul/Campcodes Cyber Cafe Management System 1.0. The vulnerability is a SQL injection in add-computer.php triggered by manipulating the compname/comploc parameters, exploitable remotely. Multiple sources confirm the issue and public disclosure; several advisories refer...

CVE-2024-30983

SQL Injection in phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0 allows arbitrary SQL via the compname parameter in /edit-computer-detail.php. Multiple sources (NVD, Red Hat, CVE lists, CNNVD, PT Security) confirm the vulnerable component and parameter. Impact details in sources ind...

CVE-2023-38920

CVE-2023-38920 affects Cyber Cafe Management System (CCMS) v1.0. The vulnerability is a Cross Site Scripting (XSS) flaw in the adminname parameter that allows a local attacker to execute arbitrary code via a crafted script. The connected documents consistently describe the issue as a stored/refle...

CVE-2024-30979

CVE-2024-30979 affects Cyber Cafe Management System 1.0. The XSS flaw is in the compname parameter of edit-computer-details.php, enabling a remote attacker to execute arbitrary code. CVSS v3.1 base score 5.9 (MEDIUM); attack vector: network, confidentiality/integrity/availability impact: LOW. Exp...

CVE-2024-30980

The CVE-2024-30980 entry describes a SQL injection in phpgurukul Cyber Cafe Management System Using PHP & MySQL v1.0, exploitable via the Computer Location parameter on manage-computer.php. Root cause: unsanitized user input enabling arbitrary SQL execution. Impact: high confidentiality, integrit...

CVE-2025-5358

CVE-2025-5358 affects PHPGurukul/Campcodes Cyber Cafe Management System 1.0. The file /bwdates-reports-details.php processes fromdate and todate; manipulation of these parameters leads to SQL injection. The vulnerability is exploitable remotely and has been disclosed publicly. Several sources con...

CVE-2025-4695

CVE-2025-4695 affects PHPGurukul/Campcodes Cyber Cafe Management System 1.0. The vulnerability is an SQL injection in the /add-users.php file, caused by unsafely handling the uadd parameter. Several sources describe remote exploitation and public disclosure. Impact is described as high confidenti...

CVE-2025-4696

The CVE-2025-4696 vulnerability affects PHPGurukul/Campcodes Cyber Cafe Management System v1.0, specifically the file /search.php. The root cause is lack of input validation on the searchdata parameter, enabling SQL injection. This can be exploited remotely; multiple sources indicate the exploit ...

CVE-2025-70893

CVE-2025-70893 affects PHPGurukul Cyber Cafe Management System v1.0 in adminprofile.php (adminname parameter). The vulnerability is a time-based blind SQL Injection caused by insufficient input sanitization, allowing authenticated attackers to inject arbitrary SQL expressions. Impact is rated Hig...

CVE-2025-7164

CVE-2025-7164 affects PHPGurukul/Campcodes Cyber Cafe Management System 1.0. The vulnerability is in /index.php via the Username parameter, allowing SQL injection. It can be exploited remotely and is described with high severity (NVD CVSSv3.1 base score 9.8; also cited as high/critical in other f...

CVE-2025-7165

Vulnerability overview: CVE-2025-7165 affects PHPGurukul/Campcodes Cyber Cafe Management System 1.0. The flaw is a SQL injection in the /forgot-password.php endpoint triggered by manipulating the email parameter. This vulnerability is exploitable remotely (network vector) with no authentication, ...

CVE-2025-70892

CVE-2025-70892 affects Phpgurukul Cyber Cafe Management System v1.0. A SQL Injection flaw exists in the user management module via the add-users.php endpoint, specifically in the username parameter where input is not properly validated. This vulnerability is described across multiple sources (NVD...

CVE-2025-11390

Summary of CVE-2025-11390 impact : PHPGurukul Cyber Cafe Management System 1.0 contains a cross-site scripting vulnerability in the POST Parameter Handler’s /search.php file, caused by unsafely handling the searchdata parameter. Exploitation can be conducted remotely and public exploits exist. Th...

CVE-2025-70890

The CVE-2025-70890 entry describes a stored XSS in Cyber Cafe Management System v1.0, via the username parameter of add-users.php. An authenticated attacker can inject JavaScript that is stored and executed when the affected page is viewed. The CVSS 3.1 vector: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

CVE-2025-70891

CVE-2025-70891 is a stored XSS vulnerability in Phpgurukul Cyber Cafe Management System v1.0, affecting the add-users.php endpoint’s uadd parameter. The issue arises from insufficient sanitization/encoding of user input, allowing an authenticated attacker to persistently store arbitrary JavaScrip...