Lucene search
K

489 matches found

NVD
NVD
added 2026/03/03 5:16 p.m.5 views

CVE-2026-26886

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /admin/services/manageservice.php...

2.7CVSS0.00034EPSS
Exploits1References1
NVD
NVD
added 2026/03/03 5:16 p.m.3 views

CVE-2026-26883

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/classes/Master.php?f=deleteappointment...

2.7CVSS0.00034EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/03/03 12:0 a.m.3 views

CVE-2026-26886

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /admin/services/manageservice.php...

6AI score0.00034EPSS
Exploits1References2
CVE
CVE
added 2026/03/03 12:0 a.m.6 views

CVE-2026-26885

CVE-2026-26885 affects the Sourcecodester Online Men's Salon Management System v1.0. The vulnerability is an SQL Injection in the endpoint /classes/Master.php?f=delete_service, caused by unsafe SQL handling in the related function. The impact is described as low with no user interaction required,...

2.7CVSS6AI score0.00034EPSS
Exploits1References1Affected Software1
EUVD
EUVD
added 2026/03/03 12:0 a.m.3 views

EUVD-2026-9299

Sourcecodester Simple Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/admin/appointments/viewappointment.php...

2.7CVSS6AI score0.00034EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/03/03 12:0 a.m.3 views

PT-2026-22753

Sourcecodester Simple Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /classes/Master.php?f=delete service...

6AI score0.00034EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/03/03 12:0 a.m.16 views

CVE-2026-26884

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/admin/appointments/viewappointment.php...

0.00034EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/03/03 12:0 a.m.18 views

CVE-2026-26886

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /admin/services/manageservice.php...

0.00034EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/03/03 12:0 a.m.3 views

PT-2026-22752

Sourcecodester Simple Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/admin/appointments/view appointment.php...

6AI score0.00034EPSS
Exploits1References2
EUVD
EUVD
added 2026/03/03 12:0 a.m.3 views

EUVD-2026-9298

Sourcecodester Simple Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/classes/Master.php?f=deleteappointment...

2.7CVSS6AI score0.00034EPSS
Exploits1References1
EUVD
EUVD
added 2026/03/03 12:0 a.m.2 views

EUVD-2026-9301

Sourcecodester Simple Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /admin/services/manageservice.php...

6AI score0.00034EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/03/03 12:0 a.m.2 views

PT-2026-22754

Sourcecodester Simple Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /admin/services/manage service.php...

6AI score0.00034EPSS
Exploits1References2
CVE
CVE
added 2026/03/03 12:0 a.m.5 views

CVE-2026-26886

CVE-2026-26886 affects Sourcecodester Online Men’s Salon Management System v1.0. The vulnerability is a SQL Injection in the admin path /admin/services/manage_service.php, caused by unsanitized input that allows injection into SQL queries. Multiple sources (Red Hat, NVD, CVE list, Attackerkb, CVE...

2.7CVSS6AI score0.00034EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/30 12:0 a.m.1 views

CVE-2025-50574

Cross-site scripting XSS vulnerability in blog-details.php in Hiruna Gallage's Glamour Salon Management System v1 allows remote attackers to inject arbitrary web script or HTML via the blog comment section parameter...

5.5AI score0.00056EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/10/30 12:0 a.m.6 views

CVE-2025-50574

Cross-site scripting XSS vulnerability in blog-details.php in Hiruna Gallage's Glamour Salon Management System v1 allows remote attackers to inject arbitrary web script or HTML via the blog comment section parameter...

0.00056EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/10/30 12:0 a.m.2 views

PT-2025-44408

Name of the Vulnerable Software and Affected Versions Glamour Salon Management System version 1 Description A cross-site scripting XSS issue exists in the blog-details.php component. This allows remote attackers to inject arbitrary web script or HTML through the blog comment section parameter. Th...

6.1CVSS5.5AI score0.00056EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/10/30 12:0 a.m.3 views

Glamour Salon Management System 安全漏洞

Glamour Salon Management System is a salon management system by the individual developer Hiruna Gallage. A security vulnerability exists in Glamour Salon Management System v1, which stems from the blog comment section parameter in blog-details.php not being filtered correctly, which could lead to...

6.1CVSS6AI score0.00056EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/10/28 9:1 p.m.2 views

CVE-2025-12325

A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

9.8CVSS7.2AI score0.00031EPSS
Exploits1References1
OSV
OSV
added 2025/10/27 9:15 p.m.1 views

CVE-2025-12325

A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

9.8CVSS5.8AI score
Exploits0References5
NVD
NVD
added 2025/10/27 9:15 p.m.2 views

CVE-2025-12325

A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

9.8CVSS0.00031EPSS
Exploits1References5
Rows per page
Query Builder