First published: Sat Apr 05 2025(Updated: )
A vulnerability was found in PHPGurukul Men Salon Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /appointment.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
phpgurukul Men Salon Management System | ||
phpgurukul Men Salon Management System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2025-3299 is classified as a critical vulnerability due to the risk of SQL injection.
To fix CVE-2025-3299, ensure that input validation and parameterized queries are implemented in the affected file /appointment.php.
CVE-2025-3299 is associated with SQL injection attacks that can be executed remotely.
CVE-2025-3299 affects the PHPGurukul Men Salon Management System version 1.0.
Exploiting CVE-2025-3299 can lead to unauthorized access to the database and manipulation of sensitive data.