Lucene search
+L

20062 matches found

Positive Technologies
Positive Technologies
•added 2025/06/25 12:00 a.m.•19 views

PT-2025-26827 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue was found in the system, affecting the /panel/edit-staff.php file. The manipulation of the editid argument leads to SQL injection. This issue can be exploit...

8.8CVSS6.7AI score0.00452EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/25 12:00 a.m.•10 views

CVE-2025-6608: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /panel/edit-services.php. The manipulation of the argument editid leads to sql injection. The attack can be launched...

8.8CVSS5.5AI score0.00452EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/06/25 12:00 a.m.•18 views

PT-2025-26826 · Unknown · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown part of the file /panel/add-staff.php. The manipulation of the Name argument leads to SQL injection. It is possibl...

8.8CVSS6.9AI score0.00452EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2025/06/25 12:00 a.m.•18 views

PT-2025-26834 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue has been found in the software, affecting an unknown functionality of the file /panel/edit-services.php. The manipulation of the editid argument leads to SQ...

8.8CVSS6.8AI score0.00452EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/25 12:00 a.m.•3 views

CVE-2025-6605: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. This vulnerability affects unknown code of the file /panel/edit-staff.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has bee...

8.8CVSS5.5AI score0.00452EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/25 12:00 a.m.•16 views

SourceCodester’s Best Salon Management System has security vulnerabilities

SourceCodester Best Salon Management System is an open source salon management system from SourceCodester. A security vulnerability exists in SourceCodester Best Salon Management System version 1.0, which stems from improper handling of parameter IDs in the file /panel/stock.php, which could lead...

8.8CVSS6.9AI score0.00452EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/06/25 12:00 a.m.•25 views

PT-2025-26831 · Unknown · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue was found in the software. It affects an unknown function of the file /panel/stock.php. The manipulation of the ID argument leads to SQL injection. This iss...

8.8CVSS6.8AI score0.00452EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/25 12:00 a.m.•8 views

CVE-2025-6606: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. This issue affects some unknown processing of the file /panel/add-services.php. The manipulation of the argument Type leads to sql injection. The attack may be initiated remotely...

8.8CVSS5.5AI score0.00452EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/25 12:00 a.m.•8 views

CVE-2025-6607: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/stock.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has...

8.8CVSS5.5AI score0.00452EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/25 12:00 a.m.•12 views

CVE-2025-6582: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /edit-customer-detailed.php. The manipulation of the argument editid leads to sql injection. The attack may be...

8.8CVSS5.5AI score0.00451EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/25 12:00 a.m.•8 views

CVE-2025-6583: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /view-appointment.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The...

8.8CVSS5.5AI score0.00451EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/25 12:00 a.m.•7 views

CVE-2025-6604: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/add-staff.php. The manipulation of the argument Name leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

8.8CVSS5.5AI score0.00452EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/25 12:00 a.m.•17 views

SourceCodester’s Best Salon Management System has security vulnerabilities

SourceCodester Best Salon Management System is a SourceCodester open source salon management system. A security vulnerability exists in SourceCodester Best Salon Management System version 1.0, which stems from the improper handling of parameter Type in file /panel/add-services.php, which can lead...

8.8CVSS7AI score0.00452EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/06/24 11:31 p.m.•14 views

CVE-2025-6582 SourceCodester Best Salon Management System edit-customer-detailed.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /edit-customer-detailed.php. The manipulation of the argument editid leads to sql injection. The attack may be...

6.5CVSS7.6AI score0.00451EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/06/24 11:31 p.m.•29 views

CVE-2025-6582 SourceCodester Best Salon Management System edit-customer-detailed.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /edit-customer-detailed.php. The manipulation of the argument editid leads to sql injection. The attack may be...

6.5CVSS0.00451EPSS
SaveExploits1References5
CVE
CVE
•added 2025/06/24 11:31 p.m.•47 views

CVE-2025-6582

The CVE-2025-6582 entry affects SourceCodester Best Salon Management System 1.0, where the /edit-customer-detailed.php file is vulnerable. The issue stems from manipulating the editid parameter, causing a SQL injection. The vulnerability can be exploited remotely and the exploit has been publicly...

8.8CVSS7.6AI score0.00451EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2025/06/24 11:15 p.m.•21 views

CVE-2025-6581

A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-customer.php. The manipulation of the argument name/email/mobilenum/gender/details/dob/marriagedate leads to sql...

8.8CVSS0.00452EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/06/24 10:31 p.m.•31 views

CVE-2025-6581 SourceCodester Best Salon Management System add-customer.php sql injection

A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-customer.php. The manipulation of the argument name/email/mobilenum/gender/details/dob/marriagedate leads to sql...

6.5CVSS0.00452EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/06/24 10:31 p.m.•12 views

CVE-2025-6581 SourceCodester Best Salon Management System add-customer.php sql injection

A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-customer.php. The manipulation of the argument name/email/mobilenum/gender/details/dob/marriagedate leads to sql...

6.5CVSS7.7AI score0.00452EPSS
SaveExploits1References5
CVE
CVE
•added 2025/06/24 10:31 p.m.•47 views

CVE-2025-6581

The CVE-2025-6581 entry concerns SourceCodester Best Salon Management System 1.0. Affected component: the add-customer.php file. Root cause: input manipulation of parameters name, email, mobilenum, gender, details, dob, and marriage_date enables SQL injection. Impact is described as exploitable r...

8.8CVSS6.4AI score0.00452EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder