First published: Sun Apr 06 2025(Updated: )
A vulnerability, which was classified as critical, was found in PHPGurukul Men Salon Management System 1.0. Affected is an unknown function of the file /admin/add-customer.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
phpgurukul Men Salon Management System |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2025-3313 is classified as a critical vulnerability due to its potential for SQL injection.
To fix CVE-2025-3313, sanitize input parameters in the affected file /admin/add-customer.php to prevent SQL injection.
CVE-2025-3313 affects PHPGurukul Men Salon Management System version 1.0.
Yes, CVE-2025-3313 can be exploited remotely since it allows attackers to manipulate input arguments.
The vulnerable function in CVE-2025-3313 is located in the file /admin/add-customer.php.