Lucene search
K

816 matches found

RedhatCVE
RedhatCVE
added 3 days ago5 views

CVE-2026-37431

Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber parameter in the /appointment-detail.php endpoint. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

9.8CVSS5.6AI score0.0004EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/08 3:31 p.m.7 views

EUVD-2026-28644

Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber parameter in the /appointment-detail.php endpoint. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

9.8CVSS5.9AI score0.0004EPSS
Exploits0References2
NVD
NVD
added 2026/05/08 3:16 p.m.7 views

CVE-2026-37431

Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber parameter in the /appointment-detail.php endpoint. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

9.8CVSS0.0004EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/08 12:0 a.m.4 views

CVE-2026-37431

Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber parameter in the /appointment-detail.php endpoint. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

5.9AI score0.0004EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/08 12:0 a.m.7 views

PT-2026-39137

Name of the Vulnerable Software and Affected Versions Beauty Parlour Management System version 1.1 Description An issue exists where a crafted SQL statement can be used to access sensitive database information. This occurs via the aptnumber parameter in the '/appointment-detail.php' endpoint...

9.8CVSS5.8AI score0.0004EPSS
Exploits0References6
CVE
CVE
added 2026/05/08 12:0 a.m.9 views

CVE-2026-37431

Affected product: Beauty Parlour Management System v1.1. Vulnerability: SQL injection via the aptnumber parameter in the /appointment-detail.php endpoint. Impact (as stated): Attacker can access sensitive database information by crafting SQL statements; high confidentiality, integrity, and availa...

9.8CVSS5.9AI score0.0004EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/08 12:0 a.m.24 views

CVE-2026-37431

Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber parameter in the /appointment-detail.php endpoint. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

0.0004EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/08 12:0 a.m.6 views

Beauty Parlour Management System SQL注入漏洞

Beauty Parlour Management System is a beauty salon management system developed by Darkseid’s developers. Version 1.1 of Beauty Parlour Management System has a SQL injection vulnerability. This vulnerability stems from the aptnumber parameter in the /appointment-detail.php endpoint, which may allo...

9.8CVSS5.8AI score0.0004EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/08 12:0 a.m.8 views

CVE-2026-37431

Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber parameter in the /appointment-detail.php endpoint. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

5.9AI score0.0004EPSS
Exploits0References1
Schneier on Security
Schneier on Security
added 2026/04/16 9:41 a.m.5 views

Human Trust of AI Agents

Interesting research: "Humans expect rationality and cooperation from LLM opponents in strategic games." Abstract: As Large Language Models LLMs integrate into our social and economic interactions, we need to deepen our understanding of how humans respond to LLMs opponents in strategic settings. ...

5.8AI score
Exploits0
RedhatCVE
RedhatCVE
added 2026/03/27 2:24 p.m.4 views

CVE-2021-27544

Cross Site Scripting XSS in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "sername" parameter...

4.8CVSS6.7AI score0.00338EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/02/08 7:22 p.m.2 views

CVE-2026-2088

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/accepted-appointment.php. Such manipulation of the argument delid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

9.8CVSS7.2AI score0.00013EPSS
Exploits1References1
OSV
OSV
added 2026/02/07 3:15 p.m.1 views

CVE-2026-2088

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/accepted-appointment.php. Such manipulation of the argument delid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

9.8CVSS5.8AI score0.00013EPSS
Exploits1References5
NVD
NVD
added 2026/02/07 3:15 p.m.1 views

CVE-2026-2088

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/accepted-appointment.php. Such manipulation of the argument delid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

9.8CVSS0.00013EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/02/07 2:32 p.m.25 views

CVE-2026-2088 PHPGurukul Beauty Parlour Management System accepted-appointment.php sql injection

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/accepted-appointment.php. Such manipulation of the argument delid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

7.5CVSS0.00013EPSS
Exploits1References5
EUVD
EUVD
added 2026/02/07 2:32 p.m.3 views

EUVD-2026-5725

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/accepted-appointment.php. Such manipulation of the argument delid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

7.5CVSS5.5AI score0.00013EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/02/07 2:32 p.m.2 views

CVE-2026-2088

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/accepted-appointment.php. Such manipulation of the argument delid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

7.5CVSS7.2AI score0.00013EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2026/02/07 2:32 p.m.10 views

CVE-2026-2088

CVE-2026-2088 affects PHPGurukul Beauty Parlour Management System 1.1, specifically the /admin/accepted-appointment.php component. The vulnerability arises from manipulating the delid parameter to trigger SQL injection, with remote exploitation indicated and the exploit publicly disclosed. Connec...

9.8CVSS7.2AI score0.00013EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2026/02/07 12:0 a.m.3 views

PHPGurukul Beauty Parlour Management System SQL注入漏洞

PHPGurukul Beauty Parlour Management System is an application system developed by PHPGurukul Corporation. Version 1.1 of the PHPGurukul Beauty Parlour Management System contains a SQL injection vulnerability. This vulnerability arises from incorrect handling of the delid parameter in the file...

9.8CVSS7.2AI score0.00013EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2026/01/09 11:29 a.m.3 views

CVE-2021-27545

SQL Injection in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to obtain sensitive database information by injecting SQL commands into the "sername" parameter...

6.5CVSS7.9AI score0.01126EPSS
Exploits1References1
Rows per page
Query Builder