Mayurik vulnerabilities, page 5
284 vulnerabilities
Known vulnerabilities in Mayurik products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 32 products.
CriticalCVE-2025-6580mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System Login sql injectionA vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the component Login. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.55%HighCVE-2025-6605mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System edit-staff.php sql injectionA vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. This vulnerability affects unknown code of the file /panel/edit-staff.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.45%HighCVE-2025-6862mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System edit_plan.php sql injectionA vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/edit_plan.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.45%HighCVE-2025-6604mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System add-staff.php sql injectionA vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/add-staff.php. The manipulation of the argument Name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.45%HighCVE-2025-6861mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System add_plan.php sql injectionA vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /panel/add_plan.php. The manipulation of the argument plan_name/description/duration_days/price leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.45%HighCVE-2025-6860mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System staff_commision.php sql injectionA vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/staff_commision.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.46%HighCVE-2025-6880mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System edit-tax.php sql injectionA vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/edit-tax.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.45%HighCVE-2025-6583mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System view-appointment.php sql injectionA vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /view-appointment.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.45%HighCVE-2025-6608mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System edit-services.php sql injectionA vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /panel/edit-services.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.EPSS0.45%HighCVE-2025-6607mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System stock.php sql injectionA vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/stock.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.45%HighCVE-2025-6582mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System edit-customer-detailed.php sql injectionA vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /edit-customer-detailed.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.EPSS0.45%HighCVE-2025-6859mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System pro_sale.php sql injectionA vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /panel/pro_sale.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.45%HighCVE-2025-6874mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System add_subscribe.php sql injectionA vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/add_subscribe.php. The manipulation of the argument user_id/plan_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.45%HighCVE-2025-6876mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System add-category.php sql injectionA vulnerability was found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /panel/add-category.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.EPSS0.45%HighCVE-2025-6581mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System add-customer.php sql injectionA vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-customer.php. The manipulation of the argument name/email/mobilenum/gender/details/dob/marriage_date leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.EPSS0.45%HighCVE-2025-6878mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System search-appointment.php sql injectionA vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.43%HighCVE-2025-6609mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System bwdates-reports-details.php sql injectionA vulnerability was found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /panel/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.EPSS0.45%CriticalCVE-2025-12598mayurik · best_house_rental_management_system +1 moreSourceCodester Best House Rental Management System admin_class.php save_tenant sql injectionA flaw has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is the function save_tenant of the file /admin_class.php. Executing manipulation of the argument firstname can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. Other parameters might be affected as well.EPSS0.41%CriticalCVE-2025-12853mayurik · best_house_rental_management_system +1 moreSourceCodester Best House Rental Management System admin_class.php delete_house sql injectionA vulnerability was determined in SourceCodester Best House Rental Management System 1.0. This affects the function delete_house of the file /admin_class.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.EPSS0.36%CriticalCVE-2025-12614mayurik · best_house_rental_management_system +1 moreSourceCodester Best House Rental Management System admin_class.php delete_payment sql injectionA weakness has been identified in SourceCodester Best House Rental Management System 1.0. Impacted is the function delete_payment of the file /admin_class.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.EPSS0.41%