8 matches found
CVE-2025-15188: Improper Neutralization of Input During Web Page Generation
A vulnerability was determined in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/search-invoices.php. Executing a manipulation of the argument searchdata can lead to cross site scripting. The attack can be launched remotel...
CVE-2025-14989: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This issue affects some unknown processing of the file /admin/search-invoices.php. Such manipulation leads to sql injection. The attack can be launched remotely. The exploit is publicly available and...
CVE-2025-11507: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /admin/search-invoices.php. This manipulation of the argument searchdata causes sql injection. The attack can be initiated remotely. The exploit has been made...
CVE-2025-3316 PHPGurukul Men Salon Management System search-invoices.php sql injection
A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/search-invoices.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The...
CVE-2025-3316
The CVE-2025-3316 entry concerns PHPGurukul Men Salon Management System 1.0. The vulnerability is an SQL injection in the /admin/search-invoices.php endpoint caused by improper handling of the searchdata parameter. It can be exploited remotely, and public exploit content exists. Affected software...
CVE-2025-3316: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/search-invoices.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The...
CVE-2024-11101: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/search-invoices.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack...
CVE-2024-30988: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in /search-invoices.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the Search bar...