Lucene search
+L

80 matches found

Vulnrichment
Vulnrichment
•added 2025/09/02 8:02 p.m.•8 views

CVE-2025-9830 PHPGurukul Beauty Parlour Management System add-customer-services.php sql injection

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown function of the file /admin/add-customer-services.php. The manipulation of the argument sids results in sql injection. The attack can be executed remotely. The exploit has been released...

7.5CVSS6.9AI score0.00421EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/09/02 8:02 p.m.•38 views

CVE-2025-9830 PHPGurukul Beauty Parlour Management System add-customer-services.php sql injection

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown function of the file /admin/add-customer-services.php. The manipulation of the argument sids results in sql injection. The attack can be executed remotely. The exploit has been released...

7.5CVSS0.00421EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/02 12:00 a.m.•8 views

CVE-2025-9830: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown function of the file /admin/add-customer-services.php. The manipulation of the argument sids results in sql injection. The attack can be executed remotely. The exploit has been released...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/09/02 12:00 a.m.•28 views

PT-2025-35611

Name of the Vulnerable Software and Affected Versions: PHPGurukul Beauty Parlour Management System version 1.1 Description: A security flaw exists in PHPGurukul Beauty Parlour Management System 1.1. The issue is related to SQL injection within an unknown function of the...

9.8CVSS7.3AI score0.00421EPSS
SaveExploits1References9
osv_cve
osv_cve
•added 2025/06/24 11:15 p.m.•16 views

CVE-2025-6581

A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-customer.php. The manipulation of the argument name/email/mobilenum/gender/details/dob/marriagedate leads to sql...

8.8CVSS5.8AI score0.00452EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/06/24 12:00 a.m.•19 views

SourceCodester’s Best Salon Management System has a vulnerability regarding injection attacks

SourceCodester Best Salon Management System is a SourceCodester open source salon management system. SourceCodester Best Salon Management System version 1.0 has an injection vulnerability , the vulnerability stems from the add-customer.php file on the parameters...

8.8CVSS7AI score0.00452EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/04/06 8:15 a.m.•26 views

CVE-2025-3313

A vulnerability, which was classified as critical, was found in PHPGurukul Men Salon Management System 1.0. Affected is an unknown function of the file /admin/add-customer.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit...

9.8CVSS5.7AI score0.00555EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/04/06 7:15 a.m.•19 views

CVE-2025-3312

A vulnerability, which was classified as critical, has been found in PHPGurukul Men Salon Management System 1.0. This issue affects some unknown processing of the file /admin/add-customer-services.php. The manipulation of the argument sids leads to sql injection. The attack may be initiated...

9.8CVSS5.8AI score0.0056EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/06 12:00 a.m.•11 views

CVE-2025-3312: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Men Salon Management System 1.0. This issue affects some unknown processing of the file /admin/add-customer-services.php. The manipulation of the argument sids leads to sql injection. The attack may be initiated...

9.8CVSS7AI score0.0056EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/02/11 5:15 p.m.•20 views

CVE-2025-22399

Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery...

7.8CVSS5.8AI score0.00152EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/11 12:00 a.m.•6 views

CVE-2025-22399: Server-Side Request Forgery (SSRF)

Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery...

7.9CVSS5.9AI score0.00152EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/11 12:00 a.m.•19 views

PT-2025-6277

Name of the Vulnerable Software and Affected Versions: Dell UCC Edge version 2.3.0 Description: The issue concerns a Blind SSRF vulnerability in the Add Customer SFTP Server of Dell UCC Edge. An unauthenticated attacker with local access could exploit this, leading to Server-Side Request Forgery...

7.9CVSS6AI score0.00152EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2024/12/31 3:15 p.m.•23 views

CVE-2024-13072

A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add-customer-services.php of the component Customer Detail Handler. The manipulation of the argument sids leads t...

9.8CVSS5.8AI score0.00667EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/12/31 12:00 a.m.•21 views

PT-2024-17916 · Unknown · 1000 Projects Beauty Parlour Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Beauty Parlour Management System version 1.0 Description: A critical issue affects an unknown functionality of the file /admin/add-customer-services.php in the Customer Detail Handler component. The manipulation of the argument...

9.8CVSS7.2AI score0.00667EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/31 12:00 a.m.•11 views

CVE-2024-13072: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add-customer-services.php of the component Customer Detail Handler. The manipulation of the argument sids leads t...

9.8CVSS5.5AI score0.00667EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/11/25 1:15 a.m.•15 views

CVE-2024-11648

A vulnerability, which was classified as critical, was found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/add-customer.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS5.7AI score0.00851EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/11/25 12:00 a.m.•21 views

PT-2024-17156 · Unknown · 1000 Projects Beauty Parlour Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Beauty Parlour Management System version 1.0 Description: A critical issue has been found in the 1000 Projects Beauty Parlour Management System. This issue affects an unknown part of the file /admin/add-customer.php. The...

9.8CVSS7.9AI score0.00851EPSS
SaveExploits1References10
osv_cve
osv_cve
•added 2024/02/05 7:15 a.m.•13 views

CVE-2024-24841

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dan's Art Add Customer for WooCommerce allows Stored XSS.This issue affects Add Customer for WooCommerce: from n/a through 1.7...

4.8CVSS7.3AI score0.00316EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/05 12:00 a.m.•12 views

CVE-2024-24841: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dan's Art Add Customer for WooCommerce allows Stored XSS.This issue affects Add Customer for WooCommerce: from n/a through 1.7...

5.9CVSS5.8AI score0.00316EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/02/05 12:00 a.m.•15 views

WordPress plugin Add Customer for WooCommerce Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.9CVSS6.3AI score0.00316EPSS
SaveExploits0References2
Rows per page
Query Builder