CVE-2025-70892

Critical · 9.8

CVSS

9.8

EPSS

0.4%

Published

Jan 15, 2026

CISA due date

—

The record

Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module. The application fails to properly validate user-supplied input in the username parameter of the add-users.php endpoint.

Affected packages

Ecosystem	Package	Introduced	Fixed