CVE-2025-11330: PHPGurukul Beauty Parlour Management System sales-reports-detail.php sql injection
A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/sales-reports-detail.php. Such manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11330?
CVE-2025-11330 is classified as a high severity vulnerability due to its potential for SQL injection.
How do I fix CVE-2025-11330?
To fix CVE-2025-11330, ensure proper input validation and parameterized queries are implemented in the affected files.
What software is affected by CVE-2025-11330?
CVE-2025-11330 affects PHPGurukul Beauty Parlour Management System version 1.1.
Can CVE-2025-11330 be exploited remotely?
Yes, CVE-2025-11330 can be exploited remotely by manipulating the parameters in the sales report detail function.
What are the potential impacts of CVE-2025-11330?
If exploited, CVE-2025-11330 can lead to unauthorized access to the database and data leakage.