CVE-2025-4757

CVE-2025-4757 affects PHPGurukul Beauty Parlour Management System v1.1. The vulnerability is an SQL injection in the forgot-password.php handling of the email parameter. Root cause: unsafely constructed SQL from externally supplied email; allows remote exploitation (network, low attack complexity...