CVE-2025-3689: PHPGurukul Men Salon Management System edit-customer-detailed.php sql injection
A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-customer-detailed.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3689?
CVE-2025-3689 is classified as a critical vulnerability.
What type of vulnerability is CVE-2025-3689?
CVE-2025-3689 is a SQL injection vulnerability affecting the file /admin/edit-customer-detailed.php.
How does CVE-2025-3689 affect PHPGurukul Men Salon Management System?
CVE-2025-3689 allows attackers to manipulate the argument editid, potentially compromising the system's database.
How do I fix CVE-2025-3689?
To fix CVE-2025-3689, update the PHPGurukul Men Salon Management System to the latest version that addresses SQL injection vulnerabilities.
What actions should be taken to mitigate the risk of CVE-2025-3689?
Implement input validation and parameterized queries to help mitigate the risk of SQL injection associated with CVE-2025-3689.