SQL Injection Vulnerability in PHPGurukul Cyber Cafe Management System
CVE-2025-70893

8.8HIGH

Key Information:

Vendor

PHPGurukul
Status
Cyber Cafe Management System
Vendor
CVE Published:
15 January 2026

What is CVE-2025-70893?

A time-based blind SQL Injection vulnerability exists in PHPGurukul Cyber Cafe Management System version 1.0 within the adminprofile.php endpoint. This flaw is caused by improper sanitization of user-supplied input through the adminname parameter, allowing authenticated attackers to execute arbitrary SQL commands. Consequently, this vulnerability can lead to unauthorized data access and manipulation, posing a significant risk to users' sensitive information.

References

https://phpgurukul.com/cyber-cafe-management-system-using...
https://github.com/efekaanakkar/Cyber-Cafe-Management-Sys...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.