CVE-2025-3299: PHPGurukul Men Salon Management System appointment.php sql injection
A vulnerability was found in PHPGurukul Men Salon Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /appointment.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3299?
CVE-2025-3299 is classified as a critical vulnerability due to the risk of SQL injection.
How do I fix CVE-2025-3299?
To fix CVE-2025-3299, ensure that input validation and parameterized queries are implemented in the affected file /appointment.php.
What type of attack is associated with CVE-2025-3299?
CVE-2025-3299 is associated with SQL injection attacks that can be executed remotely.
Which software is affected by CVE-2025-3299?
CVE-2025-3299 affects the PHPGurukul Men Salon Management System version 1.0.
What is the potential impact of exploiting CVE-2025-3299?
Exploiting CVE-2025-3299 can lead to unauthorized access to the database and manipulation of sensitive data.