CVE-2025-6607

The CVE-2025-6607 entry concerns SourceCodester Best Salon Management System 1.0. Affected is an unknown function in /panel/stock.php where manipulating the ID parameter triggers SQL injection. Exploitation is described as remote and the exploit/public disclosure is noted. Connected sources consi...

CVE-2025-6606 SourceCodester Best Salon Management System add-services.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. This issue affects some unknown processing of the file /panel/add-services.php. The manipulation of the argument Type leads to sql injection. The attack may be initiated remotely...

CVE-2025-6606

The CVE-2025-6606 entry concerns SourceCodester Best Salon Management System 1.0. Affected component: the file /panel/add-services.php, where manipulation of the argument Type enables SQL injection. Root cause: unsafe handling of the Type parameter allowing remote attacker input to influence SQL ...

CVE-2025-6606 SourceCodester Best Salon Management System add-services.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. This issue affects some unknown processing of the file /panel/add-services.php. The manipulation of the argument Type leads to sql injection. The attack may be initiated remotely...

CVE-2025-6605 SourceCodester Best Salon Management System edit-staff.php sql injection

A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. This vulnerability affects unknown code of the file /panel/edit-staff.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has bee...

CVE-2025-6605

CVE-2025-6605 affects SourceCodester Best Salon Management System 1.0. The vulnerability exists in /panel/edit-staff.php via the editid parameter, enabling SQL injection. It is exploitable remotely and an exploit has been disclosed publicly. Connected sources confirm the root cause and impact, bu...

CVE-2025-6605 SourceCodester Best Salon Management System edit-staff.php sql injection

A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. This vulnerability affects unknown code of the file /panel/edit-staff.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has bee...

CVE-2025-6604

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/add-staff.php. The manipulation of the argument Name leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

CVE-2025-6604 SourceCodester Best Salon Management System add-staff.php sql injection

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/add-staff.php. The manipulation of the argument Name leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

CVE-2025-6604 SourceCodester Best Salon Management System add-staff.php sql injection

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/add-staff.php. The manipulation of the argument Name leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

CVE-2025-6604

CVE-2025-6604 affects SourceCodester Best Salon Management System 1.0. The vulnerability is in the /panel/add-staff.php file, where the Name parameter manipulation leads to a SQL injection. It is possible to initiate the attack remotely, and the exploit has been disclosed to the public. Evidence ...

CVE-2025-6583

A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /view-appointment.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-6583

A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /view-appointment.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-6582

A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /edit-customer-detailed.php. The manipulation of the argument editid leads to sql injection. The attack may be...

CVE-2025-6582

A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /edit-customer-detailed.php. The manipulation of the argument editid leads to sql injection. The attack may be...

CVE-2025-6583

SourceCodester Best Salon Management System 1.0 has a confirmed SQL injection vulnerability in view-appointment.php via the viewid parameter. The issue affects an unknown part of the file and can be triggered remotely; the exploit has been disclosed publicly. The CVSS data in the available docume...

CVE-2025-6583 SourceCodester Best Salon Management System view-appointment.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /view-appointment.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-6583 SourceCodester Best Salon Management System view-appointment.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /view-appointment.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The...

PT-2025-26835 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /panel/bwdates-reports-details.php. The manipulation of the fromdate and todate...

SourceCodester Best Salon Management System 安全漏洞

SourceCodester Best Salon Management System is an open source salon management system from SourceCodester. A security vulnerability exists in SourceCodester Best Salon Management System version 1.0, which stems from the improper handling of the parameter editid in the file /panel/edit-staff.php,...