Lucene search
+L

2 matches found

CNNVD
CNNVD
•added 2025/09/15 12:00 a.m.•19 views

PHPGurukul Beauty Parlour Management System SQL注入漏洞

Beauty Parlour Management System is an application system. Beauty Parlour Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter delid in the file /admin/all-appointment.php. An attacker can...

9.8CVSS8.2AI score0.00421EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/15 12:00 a.m.•5 views

CVE-2025-10459: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/all-appointment.php. The manipulation of the argument delid results in sql injection. The attack can be executed remotely. The exploit has been released to the...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Rows per page
Query Builder