CVEs (28)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Phpgurukul 1Beauty Parlour Management System Jun 17, 2026 May 16, 2025 6.9 MEDIUM· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. It has been rated as critical. This issue affects some unknown processing of the file /forgot-password.php. The manipulation of the argument e...Show more |
1Phpgurukul 1Beauty Parlour Management System Jul 5, 2026 Dec 10, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A Cross Site Scripting (XSS) vulnerability in the profile.php of PHPGurukul Beauty Parlour Management System v1.1 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "Firstname" and "La...Show more |
1Phpgurukul 1Beauty Parlour Management System Jul 5, 2026 Dec 10, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Phpgurukul's Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in `login.php` via the `emailcont` parameter. |
1Phpgurukul 1Beauty Parlour Management System Jul 5, 2026 Oct 31, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 An Insecure Direct Object Reference (IDOR) vulnerability in appointment-detail.php in Phpgurukul's Beauty Parlour Management System v1.1 allows unauthorized access to the Personally Identifiable Information (PII) of othe...Show more |
1Phpgurukul 1Beauty Parlour Management System Jul 5, 2026 Oct 31, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter. |
1Phpgurukul 1Beauty Parlour Management System Jun 17, 2026 Jun 17, 2024 N/A· v4 5.9 MEDIUM· v3 N/A· v2 Cross-site scripting (XSS) vulnerability in search-appointment.php in the Admin Panel in Phpgurukul Beauty Parlour Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the search input...Show more |
1Phpgurukul 1Beauty Parlour Management System Jun 17, 2026 Apr 15, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 SQL Injection in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to obtain sensitive database information by injecting SQL commands into the "sername" paramete...Show more |
1Phpgurukul 1Beauty Parlour Management System Jun 17, 2026 Apr 15, 2021 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 Cross Site Scripting (XSS) in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "sername" paramete...Show more |