Critical severity · published May 11, 2022
CVE-2022-29009
Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allows attackers to bypass…
9.8
CVSS
22.9%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allows attackers to bypass authentication.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)22.9% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CC
Cyber Cafe Management System · Phpgurukul
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-29009
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-29009
Exploit
https://github.com/sudoninja-noob/CVE-2022-29009/blob/main/CVE-2022-29009.txt
Exploit
https://www.exploit-db.com/exploits/50355
More from Cyber Cafe Management System
9.8
CVE-2025-70892
Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module
9.8
CVE-2025-7165
PHPGurukul/Campcodes Cyber Cafe Management System forgot-password.php sql injection
9.8
CVE-2025-7164
PHPGurukul/Campcodes Cyber Cafe Management System index.php sql injection
9.8
CVE-2025-5358
PHPGurukul/Campcodes Cyber Cafe Management System bwdates-reports-details.php sql injection
9.8
CVE-2025-4304
PHPGurukul Cyber Cafe Management System adminprofile.php sql injection