Lucene search
K

5 matches found

Vulnrichment
Vulnrichment
added 2025/10/13 5:32 a.m.2 views

CVE-2025-11663 Campcodes Online Beauty Parlor Management System manage-services.php sql injection

A weakness has been identified in Campcodes Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/manage-services.php. This manipulation of the argument sername causes sql injection. The attack can be initiated remotely. The exploit has been ma...

5.8CVSS5.1AI score0.00023EPSS
Exploits1References5
CNVD
CNVD
added 2025/10/13 12:0 a.m.2 views

Beauty Parlour Management System manage-services.php File SQL Injection Vulnerability

Beauty Parlour Management System is an application system. Beauty Parlour Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter delid in the file /admin/manage-services.php. An attacker can...

9.8CVSS8.3AI score0.00042EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/09/22 4:2 p.m.1 views

CVE-2025-10805 Campcodes Online Beauty Parlor Management System add-services.php sql injection

A vulnerability was determined in Campcodes Online Beauty Parlor Management System 1.0. This affects an unknown part of the file /admin/add-services.php. Executing manipulation of the argument sername can lead to sql injection. The attack can be launched remotely. The exploit has been publicly...

6.5CVSS6.8AI score0.00044EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2021/04/15 12:0 a.m.1 views

PT-2021-17501 · Unknown · Phpgurukul Beauty Parlour Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Beauty Parlour Management System version 1.0 Description: The issue allows remote attackers to obtain sensitive database information by injecting SQL commands into the sername parameter in the "add-services.php" component...

6.5CVSS6.6AI score0.01126EPSS
Exploits1References5
OSV
OSV
added 2019/09/05 9:15 p.m.2 views

CVE-2019-15029

FusionPBX 4.4.8 allows an attacker to execute arbitrary system commands by submitting a malicious command to the serviceedit.php file which will insert the malicious command into the database. To trigger the command, one needs to call the services.php file via a GET request with the service id...

8.8CVSS6AI score0.19285EPSS
Exploits2References3
Rows per page
Query Builder