CVE-2025-70892: SQL Injection
Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module. The application fails to properly validate user-supplied input in the username parameter of the add-users.php endpoint.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-70892?
The severity of CVE-2025-70892 is high due to its SQL Injection vulnerability which can be exploited to compromise user data.
How do I fix CVE-2025-70892?
To fix CVE-2025-70892, ensure that user input is properly sanitized and validated in the username parameter of the add-users.php endpoint.
What is SQL Injection in CVE-2025-70892?
SQL Injection in CVE-2025-70892 refers to the vulnerability that allows attackers to execute arbitrary SQL queries through unvalidated user input.
Which versions of Phpgurukul Cyber Cafe Management System are affected by CVE-2025-70892?
CVE-2025-70892 affects version 1.0 of the Phpgurukul Cyber Cafe Management System.
Can CVE-2025-70892 allow unauthorized access to the database?
Yes, exploiting CVE-2025-70892 can potentially allow unauthorized access to the database and reveal sensitive information.