CVE-2025-70893: SQL Injection
A time-based blind SQL Injection vulnerability exists in PHPGurukul Cyber Cafe Management System v1.0 within the adminprofile.php endpoint. The application fails to properly sanitize user-supplied input provided via the adminname parameter, allowing authenticated attackers to inject arbitrary SQL expressions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-70893?
CVE-2025-70893 is classified as a high-severity vulnerability due to its potential for exploitation through SQL Injection.
How does CVE-2025-70893 exploit the Cyber Cafe Management System?
CVE-2025-70893 allows attackers to inject arbitrary SQL commands via the adminname parameter in the adminprofile.php endpoint.
Who is affected by CVE-2025-70893?
CVE-2025-70893 affects users of PHPGurukul Cyber Cafe Management System version 1.0.
How can I mitigate CVE-2025-70893?
Mitigation for CVE-2025-70893 involves implementing input validation and sanitization for all user inputs in the application.
Is there a patch available for CVE-2025-70893?
As of now, there is no official patch released specifically for CVE-2025-70893, and users should apply appropriate security measures.