CVE-2025-3829: PHPGurukul Men Salon Management System sales-reports-detail.php sql injection
A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/sales-reports-detail.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3829?
CVE-2025-3829 has been classified as critical.
What type of vulnerability is CVE-2025-3829?
CVE-2025-3829 is a SQL injection vulnerability.
How does the SQL injection occur in CVE-2025-3829?
The SQL injection in CVE-2025-3829 is triggered by the manipulation of the arguments fromdate or todate in the /admin/sales-reports-detail.php file.
What is the potential impact of exploiting CVE-2025-3829?
Exploiting CVE-2025-3829 could allow an attacker to execute arbitrary SQL queries on the database.
How can I fix CVE-2025-3829?
To fix CVE-2025-3829, ensure that proper input validation and parameterized queries are implemented to mitigate SQL injection risks.