First published: Wed Apr 16 2025(Updated: )
A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-customer-detailed.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
phpgurukul Men Salon Management System |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2025-3689 is classified as a critical vulnerability.
CVE-2025-3689 is a SQL injection vulnerability affecting the file /admin/edit-customer-detailed.php.
CVE-2025-3689 allows attackers to manipulate the argument editid, potentially compromising the system's database.
To fix CVE-2025-3689, update the PHPGurukul Men Salon Management System to the latest version that addresses SQL injection vulnerabilities.
Implement input validation and parameterized queries to help mitigate the risk of SQL injection associated with CVE-2025-3689.