Lucene search

Beauty Parlour Management System Security Vulnerabilities

cve

CVE-2021-27544

Cross Site Scripting (XSS) in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "sername" parameter.

4.8CVSS

5.3AI Score

0.001EPSS

2021-04-15 12:15 PM

cve

CVE-2021-27545

SQL Injection in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to obtain sensitive database information by injecting SQL commands into the "sername" parameter.

6.5CVSS

6.8AI Score

0.044EPSS

2021-04-15 12:15 PM