CVE-2025-3827: PHPGurukul Men Salon Management System forgot-password.php sql injection
A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3827?
CVE-2025-3827 is classified as critical due to its potential for allowing remote SQL injection attacks.
How do I fix CVE-2025-3827?
To fix CVE-2025-3827, you should patch the PHPGurukul Men Salon Management System or sanitize inputs in the /admin/forgot-password.php file.
What type of vulnerability is CVE-2025-3827?
CVE-2025-3827 is a SQL injection vulnerability that affects the argument email in the /admin/forgot-password.php file.
Who is affected by CVE-2025-3827?
Users of PHPGurukul Men Salon Management System version 1.0 are affected by CVE-2025-3827.
Can CVE-2025-3827 be exploited remotely?
Yes, CVE-2025-3827 can be exploited remotely, allowing attackers to launch SQL injection attacks.