Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/09/16 7:24 p.m.•12 views

CVE-2025-10402

A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /admin/readenq.php. Executing manipulation of the argument delid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may...

9.8CVSS6.9AI score0.00415EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/09/16 12:00 a.m.•16 views

Beauty Parlour Management System readenq.php File SQL Injection Vulnerability

Beauty Parlour Management System is an application system. Beauty Parlour Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter delid in the file /admin/readenq.php. An attacker can exploit th...

9.8CVSS7.9AI score0.00415EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/14 12:00 a.m.•2 views

CVE-2025-10402: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /admin/readenq.php. Executing manipulation of the argument delid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may...

9.8CVSS5.5AI score0.00415EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/09/14 12:00 a.m.•17 views

PT-2025-37419

Name of the Vulnerable Software and Affected Versions: PHPGurukul Beauty Parlour Management System version 1.1 Description: A SQL injection issue exists in PHPGurukul Beauty Parlour Management System version 1.1. The issue is located in the /admin/readenq.php file, within an unknown function...

9.8CVSS7.4AI score0.00415EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/27 12:00 a.m.•8 views

CVE-2025-50370: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability exists in the Inquiry Management functionality /mcgs/admin/readenq.php of the Phpgurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authenticated admin to delete inquiry records via a simple GET request, without requiring ...

6.5CVSS5.8AI score0.00155EPSS
SaveExploits0References1
OSV
OSV
•added 2025/06/05 5:15 p.m.•18 views

CVE-2025-5668

A vulnerability classified as critical has been found in PHPGurukul Medical Card Generation System 1.0. This affects an unknown part of the file /admin/readenq.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

8.8CVSS5.8AI score0.00463EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/05 12:00 a.m.•6 views

CVE-2025-5668: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in PHPGurukul Medical Card Generation System 1.0. This affects an unknown part of the file /admin/readenq.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

8.8CVSS6.4AI score0.00463EPSS
SaveExploits1References1
Rows per page
Query Builder