CVE-2024-11591

A vulnerability, which was classified as critical, was found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/add-services.php. The manipulation of the argument sername leads to sql injection. It is possible to initiate the attack remotely. Th...

CVE-2024-11591

creationtimestamp| type| source ---|---|--- 2024-11-21 14:01:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113521306663563862...

CVE-2024-11591 1000 Projects Beauty Parlour Management System add-services.php sql injection

A vulnerability, which was classified as critical, was found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/add-services.php. The manipulation of the argument sername leads to sql injection. It is possible to initiate the attack remotely. Th...

CVE-2024-11591

The CVE-2024-11591 entry concerns 1000 Projects Beauty Parlour Management System v1.0. Affected component: /admin/add-services.php, where manipulation of the parameter sername triggers an SQL injection. Root cause is improper handling/validation of the sername input, enabling the attacker to infl...