CVE-2025-11615

A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/addinvoice.php. Performing manipulation of the argument ServiceId results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2025-11615 SourceCodester Best Salon Management System add_invoice.php sql injection

A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/addinvoice.php. Performing manipulation of the argument ServiceId results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2025-11615

The CVE-2025-11615 entries describe a SQL injection flaw in SourceCodester Best Salon Management System 1.0, specifically in /panel/add_invoice.php where manipulating the ServiceId parameter enables remote code execution. The vulnerability is exploitable remotely and exploits have been released p...