CVE-2025-11503: PHPGurukul Beauty Parlour Management System manage-services.php sql injection
A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1. This issue affects some unknown processing of the file /admin/manage-services.php. Executing a manipulation of the argument delid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11503?
CVE-2025-11503 has been rated as a high severity vulnerability due to its potential for SQL injection.
How do I fix CVE-2025-11503?
To fix CVE-2025-11503, validate and sanitize all input parameters in the manage-services.php file.
What systems are affected by CVE-2025-11503?
CVE-2025-11503 specifically affects versions of PHPGurukul Beauty Parlour Management System prior to 1.1.
Can CVE-2025-11503 be exploited remotely?
Yes, CVE-2025-11503 can be exploited remotely by manipulating the delid argument.
What types of impacts can result from CVE-2025-11503?
Exploiting CVE-2025-11503 may allow attackers to execute arbitrary SQL commands on the database.