Lucene search
+L

1177 matches found

RedhatCVE
RedhatCVE
added 2025/10/31 12:13 a.m.8 views

CVE-2025-50574

Cross-site scripting XSS vulnerability in blog-details.php in Hiruna Gallage's Glamour Salon Management System v1 allows remote attackers to inject arbitrary web script or HTML via the blog comment section parameter...

6.1CVSS6AI score0.00327EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/30 3:32 p.m.11 views

EUVD-2025-37011

Cross-site scripting XSS vulnerability in blog-details.php in Hiruna Gallage's Glamour Salon Management System v1 allows remote attackers to inject arbitrary web script or HTML via the blog comment section parameter...

5.5AI score0.00327EPSS
SaveExploits1References4
OSV
OSV
added 2025/10/30 3:15 p.m.8 views

CVE-2025-50574

Cross-site scripting XSS vulnerability in blog-details.php in Hiruna Gallage's Glamour Salon Management System v1 allows remote attackers to inject arbitrary web script or HTML via the blog comment section parameter...

6.1CVSS5.9AI score0.00327EPSS
SaveExploits1References3
NVD
NVD
added 2025/10/30 3:15 p.m.16 views

CVE-2025-50574

Cross-site scripting XSS vulnerability in blog-details.php in Hiruna Gallage's Glamour Salon Management System v1 allows remote attackers to inject arbitrary web script or HTML via the blog comment section parameter...

6.1CVSS0.00327EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/10/30 12:00 a.m.15 views

Glamour Salon Management System 安全漏洞

Glamour Salon Management System is a salon management system by the individual developer Hiruna Gallage. A security vulnerability exists in Glamour Salon Management System v1, which stems from the blog comment section parameter in blog-details.php not being filtered correctly, which could lead to...

6.1CVSS6AI score0.00327EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/10/30 12:00 a.m.19 views

CVE-2025-50574

Cross-site scripting XSS vulnerability in blog-details.php in Hiruna Gallage's Glamour Salon Management System v1 allows remote attackers to inject arbitrary web script or HTML via the blog comment section parameter...

0.00327EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/10/30 12:00 a.m.12 views

PT-2025-44408

Name of the Vulnerable Software and Affected Versions Glamour Salon Management System version 1 Description A cross-site scripting XSS issue exists in the blog-details.php component. This allows remote attackers to inject arbitrary web script or HTML through the blog comment section parameter. Th...

6.1CVSS5.5AI score0.00327EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/30 12:00 a.m.20 views

CVE-2025-50574

CVE-2025-50574 is an XSS vulnerability affecting the Glamour Salon Management System v1, specifically in the blog-details.php component. The issue arises from insufficient input filtering on the blog comment section parameter, allowing remote attackers to inject arbitrary script or HTML. Multiple...

6.1CVSS5.6AI score0.00327EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/30 12:00 a.m.5 views

CVE-2025-50574

Cross-site scripting XSS vulnerability in blog-details.php in Hiruna Gallage's Glamour Salon Management System v1 allows remote attackers to inject arbitrary web script or HTML via the blog comment section parameter...

5.5AI score0.00327EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/10/28 9:01 p.m.9 views

CVE-2025-12325

A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

9.8CVSS7.2AI score0.00465EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/27 9:15 p.m.8 views

CVE-2025-12325

A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

9.8CVSS5.8AI score0.00465EPSS
SaveExploits1References5
NVD
NVD
added 2025/10/27 9:15 p.m.8 views

CVE-2025-12325

A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

9.8CVSS0.00465EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/10/27 8:32 p.m.8 views

CVE-2025-12325 SourceCodester Best Salon Management System forgot-password.php sql injection

A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

7.5CVSS6.8AI score0.00465EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/27 8:32 p.m.10 views

EUVD-2025-36340

A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

7.5CVSS6.6AI score0.00465EPSS
SaveExploits1References7
CVE
CVE
added 2025/10/27 8:32 p.m.18 views

CVE-2025-12325

CVE-2025-12325 affects SourceCodester Best Salon Management System 1.0. The vulnerability is in panel/forgot-password.php where the email parameter is manipulated to cause SQL injection. It is exploitable remotely, and the exploit has been disclosed publicly. Public sources across multiple feeds ...

9.8CVSS6.8AI score0.00465EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/27 12:00 a.m.13 views

PT-2025-44041

A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

9.8CVSS7.2AI score0.00465EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/10/27 12:00 a.m.13 views

SourceCodester Best Salon Management System SQL注入漏洞

SourceCodester Best Salon Management System is a SourceCodester open source salon management system. A SQL injection vulnerability exists in SourceCodester Best Salon Management System version 1.0, which originates from the incorrect manipulation of the parameter email in the file...

9.8CVSS7.7AI score0.00465EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/10/14 5:40 a.m.17 views

CVE-2025-11662

A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. Impacted is an unknown function of the file /booking.php. The manipulation of the argument servid results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the...

9.8CVSS7.5AI score0.00441EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/13 6:32 a.m.9 views

EUVD-2025-33962

A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. Impacted is an unknown function of the file /booking.php. The manipulation of the argument servid results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the...

7.5CVSS6.5AI score0.00441EPSS
SaveExploits1References6
OSV
OSV
added 2025/10/13 5:15 a.m.11 views

CVE-2025-11662

A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. Impacted is an unknown function of the file /booking.php. The manipulation of the argument servid results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the...

9.8CVSS5.7AI score0.00441EPSS
SaveExploits1References5
Rows per page
Query Builder