PT-2025-40982 · Phpgurukul · Phpgurukul Cyber Cafe Management System

Hhsw34

·

CVE-2025-11390

·

Published

2025-10-07

·

Updated

2025-10-07

CVSS v3.1

6.1

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions PHPGurukul Cyber Cafe Management System version 1.0
Description A cross site scripting issue exists in PHPGurukul Cyber Cafe Management System. The issue is located in the /search.php file, specifically within the POST Parameter Handler component. Manipulation of the searchdata parameter can lead to the execution of malicious scripts. The exploit has been publicly released.
Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

Code Injection

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-94CWE-79

Related Identifiers

CVE-2025-11390

Affected Products

Phpgurukul Cyber Cafe Management System