A weakness has been identified in PHPGurukul Cyber Cafe Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /search.php of the component POST Parameter Handler. Executing manipulation of the argument searchdata can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.
References
| Link | Resource |
|---|---|
| https://github.com/QIU-DIE/CVE/issues/4 | Exploit Third Party Advisory Issue Tracking |
| https://phpgurukul.com/ | Product |
| https://vuldb.com/?ctiid.327317 | Permissions Required VDB Entry |
| https://vuldb.com/?id.327317 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.664984 | Third Party Advisory VDB Entry |
Configurations
History
09 Oct 2025, 16:39
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Phpgurukul
Phpgurukul cyber Cafe Management System |
|
| References | () https://github.com/QIU-DIE/CVE/issues/4 - Exploit, Third Party Advisory, Issue Tracking | |
| References | () https://phpgurukul.com/ - Product | |
| References | () https://vuldb.com/?ctiid.327317 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.327317 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.664984 - Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:phpgurukul:cyber_cafe_management_system:1.0:*:*:*:*:*:*:* |
07 Oct 2025, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-07 12:15
Updated : 2025-10-09 16:39
NVD link : CVE-2025-11390
Mitre link : CVE-2025-11390
CVE.ORG link : CVE-2025-11390
JSON object : View
Products Affected
phpgurukul
- cyber_cafe_management_system