CVE-2025-10459: PHPGurukul Beauty Parlour Management System all-appointment.php sql injection
A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/all-appointment.php. The manipulation of the argument delid results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10459?
The severity of CVE-2025-10459 is considered critical due to the potential for remote SQL injection attacks.
How do I fix CVE-2025-10459?
To fix CVE-2025-10459, ensure that input validation and parameterized queries are implemented for user inputs in the affected file /admin/all-appointment.php.
What software is affected by CVE-2025-10459?
CVE-2025-10459 affects the PHPGurukul Beauty Parlour Management System version 1.1.
Can CVE-2025-10459 be exploited remotely?
Yes, CVE-2025-10459 can be exploited remotely, allowing attackers to execute SQL injection attacks.
What is SQL injection in the context of CVE-2025-10459?
In the context of CVE-2025-10459, SQL injection refers to the exploitation of a vulnerability in the system allowing attackers to manipulate SQL queries through unsanitized input.