Phpgurukul Beauty Parlour Management System vulnerabilities, page 2
28 vulnerabilities
Known vulnerabilities in Phpgurukul Beauty Parlour Management System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-10403phpgurukulbeauty_parlour_management_system
EPSS score0.45%
A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown function of the file /admin/view-enquiry.php. The manipulation of the argument viewid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.CVE-2025-10402phpgurukulbeauty_parlour_management_systemEPSS score0.41%
A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /admin/readenq.php. Executing manipulation of the argument delid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.CVE-2024-51066phpgurukulbeauty_parlour_management_systemEPSS score0.49%
An Insecure Direct Object Reference (IDOR) vulnerability in appointment-detail.php in Phpgurukul's Beauty Parlour Management System v1.1 allows unauthorized access to the Personally Identifiable Information (PII) of other customers.CVE-2024-51065phpgurukulbeauty_parlour_management_systemEPSS score0.51%
Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter.CVE-2024-37798phpgurukulbeauty_parlour_management_systemEPSS score0.35%
Cross-site scripting (XSS) vulnerability in search-appointment.php in the Admin Panel in Phpgurukul Beauty Parlour Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the search input field.CVE-2024-53481phpgurukulbeauty_parlour_management_systemEPSS score0.50%
A Cross Site Scripting (XSS) vulnerability in the profile.php of PHPGurukul Beauty Parlour Management System v1.1 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "Firstname" and "Last name" parameters.CVE-2024-53480phpgurukulbeauty_parlour_management_systemEPSS score0.62%
Phpgurukul's Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in `login.php` via the `emailcont` parameter.CVE-2026-2088phpgurukulbeauty_parlour_management_systemEPSS score0.43%
A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/accepted-appointment.php. Such manipulation of the argument delid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.