5 matches found
CVE-2025-11663 Campcodes Online Beauty Parlor Management System manage-services.php sql injection
A weakness has been identified in Campcodes Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/manage-services.php. This manipulation of the argument sername causes sql injection. The attack can be initiated remotely. The exploit has been ma...
Beauty Parlour Management System manage-services.php File SQL Injection Vulnerability
Beauty Parlour Management System is an application system. Beauty Parlour Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter delid in the file /admin/manage-services.php. An attacker can...
CVE-2025-10805 Campcodes Online Beauty Parlor Management System add-services.php sql injection
A vulnerability was determined in Campcodes Online Beauty Parlor Management System 1.0. This affects an unknown part of the file /admin/add-services.php. Executing manipulation of the argument sername can lead to sql injection. The attack can be launched remotely. The exploit has been publicly...
PT-2021-17501 · Unknown · Phpgurukul Beauty Parlour Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Beauty Parlour Management System version 1.0 Description: The issue allows remote attackers to obtain sensitive database information by injecting SQL commands into the sername parameter in the "add-services.php" component...
CVE-2019-15029
FusionPBX 4.4.8 allows an attacker to execute arbitrary system commands by submitting a malicious command to the serviceedit.php file which will insert the malicious command into the database. To trigger the command, one needs to call the services.php file via a GET request with the service id...