CVEs (28)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Phpgurukul 1Beauty Parlour Management System May 27, 2025 May 16, 2025 6.9 MEDIUM· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. It has been rated as critical. This issue affects some unknown processing of the file /forgot-password.php. The manipulation of the argument e...Show more |
1Phpgurukul 1Beauty Parlour Management System Apr 15, 2025 Dec 10, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A Cross Site Scripting (XSS) vulnerability in the profile.php of PHPGurukul Beauty Parlour Management System v1.1 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "Firstname" and "La...Show more |
1Phpgurukul 1Beauty Parlour Management System Apr 7, 2025 Dec 10, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Phpgurukul's Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in `login.php` via the `emailcont` parameter. |
1Phpgurukul 1Beauty Parlour Management System Apr 4, 2025 Oct 31, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 An Insecure Direct Object Reference (IDOR) vulnerability in appointment-detail.php in Phpgurukul's Beauty Parlour Management System v1.1 allows unauthorized access to the Personally Identifiable Information (PII) of othe...Show more |
1Phpgurukul 1Beauty Parlour Management System Mar 31, 2025 Oct 31, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter. |
1Phpgurukul 1Beauty Parlour Management System Apr 3, 2025 Jun 17, 2024 N/A· v4 5.9 MEDIUM· v3 N/A· v2 Cross-site scripting (XSS) vulnerability in search-appointment.php in the Admin Panel in Phpgurukul Beauty Parlour Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the search input...Show more |
1Phpgurukul 1Beauty Parlour Management System Nov 21, 2024 Apr 15, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 SQL Injection in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to obtain sensitive database information by injecting SQL commands into the "sername" paramete...Show more |
1Phpgurukul 1Beauty Parlour Management System Nov 21, 2024 Apr 15, 2021 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 Cross Site Scripting (XSS) in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "sername" paramete...Show more |