Lucene search
+L

154 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/29 12:00 a.m.•1 views

CVE-2025-6860: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/staffcommision.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated...

8.8CVSS5.5AI score0.0042EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/29 12:00 a.m.•1 views

CVE-2025-6874: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/addsubscribe.php. The manipulation of the argument userid/planid leads to sql injection. It is possible to launch the attack remotely...

8.8CVSS5.5AI score0.0042EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/29 12:00 a.m.•1 views

CVE-2025-6875: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /panel/edit-subscription.php. The manipulation of the argument editid leads to sql injection. The attack can be...

8.8CVSS5.5AI score0.0042EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/29 12:00 a.m.•0 views

CVE-2025-6862: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/editplan.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has...

8.8CVSS5.5AI score0.0042EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/29 12:00 a.m.•1 views

CVE-2025-6859: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /panel/prosale.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. T...

8.8CVSS5.5AI score0.0042EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/29 12:00 a.m.•12 views

SourceCodester Best Salon Management System 注入漏洞

SourceCodester Best Salon Management System is a SourceCodester open source salon management system. SourceCodester Best Salon Management System version 1.0 has an injection vulnerability, the vulnerability stems from the wrong operation of the parameter fromdate/todate in the file...

8.8CVSS7AI score0.0042EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/06/29 12:00 a.m.•17 views

PT-2025-27387 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown functionality of the file /panel/edit-subscription.php. The manipulation of the editid argument leads to SQL...

8.8CVSS8.1AI score0.0042EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2025/06/29 12:00 a.m.•20 views

PT-2025-27368 · Unknown · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Best Salon Management System. The issue affects an unknown function of the file /panel/edit plan.php. The...

8.8CVSS8.5AI score0.0042EPSS
SaveExploits1References11
OSV
OSV
•added 2025/06/25 2:15 p.m.•15 views

CVE-2025-6607

A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/stock.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has...

8.8CVSS5.7AI score0.00421EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/06/25 2:00 p.m.•30 views

CVE-2025-6607 SourceCodester Best Salon Management System stock.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/stock.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has...

6.5CVSS0.00421EPSS
SaveExploits1References5
OSV
OSV
•added 2025/06/25 12:15 a.m.•13 views

CVE-2025-6583

A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /view-appointment.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The...

8.8CVSS5.7AI score0.0042EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/25 12:00 a.m.•0 views

CVE-2025-6582: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /edit-customer-detailed.php. The manipulation of the argument editid leads to sql injection. The attack may be...

8.8CVSS5.5AI score0.00451EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/25 12:00 a.m.•0 views

CVE-2025-6606: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. This issue affects some unknown processing of the file /panel/add-services.php. The manipulation of the argument Type leads to sql injection. The attack may be initiated remotely...

8.8CVSS5.5AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/25 12:00 a.m.•0 views

CVE-2025-6605: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. This vulnerability affects unknown code of the file /panel/edit-staff.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has bee...

8.8CVSS5.5AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/25 12:00 a.m.•2 views

CVE-2025-6608: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /panel/edit-services.php. The manipulation of the argument editid leads to sql injection. The attack can be launched...

8.8CVSS5.5AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/25 12:00 a.m.•1 views

CVE-2025-6609: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /panel/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be...

8.8CVSS5.5AI score0.00421EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/25 12:00 a.m.•11 views

SourceCodester Best Salon Management System 安全漏洞

SourceCodester Best Salon Management System is an open source salon management system from SourceCodester. A security vulnerability exists in SourceCodester Best Salon Management System version 1.0, which stems from the improper handling of the parameter editid in the file /panel/edit-staff.php,...

8.8CVSS6.8AI score0.00421EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/06/25 12:00 a.m.•10 views

SourceCodester Best Salon Management System 安全漏洞

SourceCodester Best Salon Management System is an open source salon management system from SourceCodester. A security vulnerability exists in SourceCodester Best Salon Management System version 1.0, which stems from improper handling of parameter IDs in the file /panel/stock.php, which could lead...

8.8CVSS6.9AI score0.00421EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/25 12:00 a.m.•0 views

CVE-2025-6607: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/stock.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has...

8.8CVSS5.5AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/25 12:00 a.m.•1 views

CVE-2025-6604: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/add-staff.php. The manipulation of the argument Name leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

8.8CVSS5.5AI score0.00421EPSS
SaveExploits1References1
Rows per page
Query Builder