CVE-2025-10403: PHPGurukul Beauty Parlour Management System view-enquiry.php sql injection
A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown function of the file /admin/view-enquiry.php. The manipulation of the argument viewid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10403?
CVE-2025-10403 is a critical vulnerability that allows for SQL injection attacks in the PHPGurukul Beauty Parlour Management System.
How do I fix CVE-2025-10403?
To fix CVE-2025-10403, validate and sanitize user inputs in the /admin/view-enquiry.php file to prevent SQL injection.
Can CVE-2025-10403 be exploited remotely?
Yes, CVE-2025-10403 can be exploited remotely, allowing attackers to manipulate the database.
What component is affected by CVE-2025-10403?
CVE-2025-10403 affects the /admin/view-enquiry.php file in the PHPGurukul Beauty Parlour Management System.
What type of attack does CVE-2025-10403 enable?
CVE-2025-10403 enables SQL injection attacks through improper handling of the viewid argument.