CVE-2025-11416: PHPGurukul Beauty Parlour Management System invoices.php sql injection
A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/invoices.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11416?
CVE-2025-11416 has a high severity rating due to its potential for remote SQL injection.
How do I fix CVE-2025-11416?
To fix CVE-2025-11416, validate and sanitize the input for the 'delid' argument in the admin/invoices.php file.
What types of attacks can exploit CVE-2025-11416?
CVE-2025-11416 can be exploited through SQL injection attacks, which may compromise the database.
Which version of PHPGurukul is affected by CVE-2025-11416?
CVE-2025-11416 affects PHPGurukul Beauty Parlour Management System version 1.1.
Can CVE-2025-11416 be exploited remotely?
Yes, CVE-2025-11416 can be exploited remotely, allowing attackers to manipulate the system from outside.