Cyber Resilience

CVE-2025-7164

MediumPublic PoC

Published: 08 July 2025

Published
08 July 2025
Modified
29 April 2026
KEV Added
—
Patch
—
CVSS Score v4 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0030 54.0th percentile
Risk Priority 11 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-7164 is a medium-severity Injection (CWE-74) vulnerability in Phpgurukul Cyber Cafe Management System. Its CVSS base score is 5.5 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 46.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).

Deeper analysis

CVE-2025-7164 is a critical SQL injection vulnerability (CWE-74, CWE-89) in PHPGurukul/Campcodes Cyber Cafe Management System version 1.0. The flaw affects an unknown functionality within the /index.php file, where manipulation of the Username argument triggers the injection. It was published on 2025-07-08 with a CVSS v3.1 base score of 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L).

Unauthenticated remote attackers can exploit this vulnerability with low attack complexity and no user interaction required. Successful exploitation enables limited impacts on confidentiality, integrity, and availability, such as unauthorized data access, modification, or disruption via injected SQL payloads.

Advisories detailing the issue are available on VulDB (ctiid.315103, id.315103, submit.606371) and GitHub (f1rstb100d/myCVE/issues/107). The exploit has been publicly disclosed and may be used by attackers. No specific patches or mitigations are mentioned in the initial reports.

EU & UK References

Vulnerability details

A vulnerability has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument Username leads to sql injection. The attack…

more

can be launched remotely. The exploit has been disclosed to the public and may be used.

CWE(s)
CWE-74CWE-89

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
Why these techniques?

Direct unauthenticated remote SQL injection in a public-facing web application (/index.php) enables initial access via exploitation of the exposed app.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

CVEs Like This One

CVE-2025-70892Same product: Phpgurukul Cyber Cafe Management System
CVE-2025-7165Same product: Phpgurukul Cyber Cafe Management System
CVE-2025-70893Same product: Phpgurukul Cyber Cafe Management System
CVE-2025-2683Same vendor: Phpgurukul
CVE-2025-7482Same vendor: Phpgurukul
CVE-2026-0733Same vendor: Phpgurukul
CVE-2026-2088Same vendor: Phpgurukul
CVE-2025-1906Same vendor: Phpgurukul
CVE-2025-7521Same vendor: Phpgurukul
CVE-2025-2680Same vendor: Phpgurukul

Affected Assets

phpgurukul
cyber cafe management system
1.0

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

SI-10 Information Input Validation good match
prevent

Directly requires validation and sanitization of untrusted input (Username) to block SQL injection payloads before they reach the database.

SI-2 Flaw Remediation good match
prevent

Mandates timely remediation of the publicly disclosed SQL injection flaw in /index.php of the unauthenticated login path.

AC-6 Least Privilege partial match
prevent

Limits database account privileges so that a successful injection via the Username field cannot perform broad data modification or exfiltration.

References