CVE-2024-5069

The CVE-2024-5069 vulnerability affects SourceCodester Simple Online Mens Salon Management System 1.0, specifically the view_service.php file. Affected functionality allows manipulation of the id argument, leading to SQL injection . The issue can be exploited remotely, and the vulnerability has b...

CVE-2023-3986

SourceCodester Simple Online Mens Salon Management System v1.0 exposes a cross-site scripting vulnerability in the /admin/?page=user/list endpoint. The issue arises from unsafely handling the First Name/Last Name/Username fields, allowing an attacker to inject script. The vulnerability is potenti...

CVE-2023-3987

CVE-2023-3987 affects SourceCodester Simple Online Mens Salon Management System 1.0. The vulnerability is a SQL injection in the file path /admin/?page=user/manage_user&id=3 (parameter id) that can be manipulated remotely. Multiple sources confirm an exploitation vector and public disclosure of t...

CVE-2021-44600

The CVE-2021-44600 entry concerns Simple Online Mens Salon Management System (MSMS) 1.0, where the password parameter is vulnerable to SQL injection. Connected sources (PT-2021-24139) provide concrete details: the vulnerability resides in the password parameter and can allow an attacker to retrie...

CVE-2026-26885

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection within the /classes/Master.php?f=delete_service endpoint. The root cause involves the improper neutralization of special elements used in an SQL command. While the vulnerability has been identified across mult...

CVE-2026-26884

The Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection within the /msms/admin/appointments/view_appointment.php file. The vulnerability stems from the improper neutralization of special elements used in an SQL command. Exploitation details are not provided in ...

CVE-2026-26883

The Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection due to improper neutralization of special elements used in an SQL command. The flaw is specifically located in the /msms/classes/Master.php?f=delete_appointment file. While the vulnerability is confirmed a...

CVE-2026-26886

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection within the /admin/services/manage_service.php file. This vulnerability stems from the improper neutralization of special elements used in an SQL command. The documents do not provide specific details regarding...