CVE-2025-10807: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. This issue affects some unknown processing of the file /admin/edit-customer-detailed.php. The manipulation of the argument editid results in sql injection. The attack may be launched remotely. The exploit...

CVE-2025-6582: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /edit-customer-detailed.php. The manipulation of the argument editid leads to sql injection. The attack may be...

CVE-2025-5368: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. This issue affects some unknown processing of the file /expense-yearwise-reports-detailed.php. The manipulation of the argument todate leads to sql injection. The attack may be initiated...

CVE-2025-4908: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in PHPGurukul Daily Expense Tracker System 1.1. This affects an unknown part of the file /expense-datewise-reports-detailed.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack...

PT-2024-17501

Name of the Vulnerable Software and Affected Versions 1000 Projects Beauty Parlour Management System version 1.0 Description A critical issue has been found in the system, affecting an unknown function of the file /admin/edit-customer-detailed.php. The manipulation of the argument name leads to S...

CVE-2024-12234: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/edit-customer-detailed.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack...

CVE-2024-9007 jeanmarc77 123solar detailed.php cross site scripting

A vulnerability classified as problematic has been found in jeanmarc77 123solar 1.8.4.5. This affects an unknown part of the file /detailed.php. The manipulation of the argument date1 leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2024-9007

A vulnerability classified as problematic has been found in jeanmarc77 123solar 1.8.4.5. This affects an unknown part of the file /detailed.php. The manipulation of the argument date1 leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to...

123Solar 跨站脚本漏洞

123Solar is a set of lightweight PHP/JS files from the individual developer Jean-Marc Louviaux. A cross-site scripting vulnerability exists in 123Solar version 1.8.4.5, which stems from the fact that the parameter date1 in the file /detailed.php causes cross-site scripting...

CVE-2024-9007: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in jeanmarc77 123solar 1.8.4.5. This affects an unknown part of the file /detailed.php. The manipulation of the argument date1 leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to...