CVE-2025-6607: SourceCodester Best Salon Management System stock.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/stock.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6607?
CVE-2025-6607 is classified as a critical vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-6607?
To fix CVE-2025-6607, it is recommended to validate and sanitize user input as well as ensure proper parameterized queries in the affected file /panel/stock.php.
What software is affected by CVE-2025-6607?
CVE-2025-6607 affects the SourceCodester Best Salon Management System version 1.0.
Can CVE-2025-6607 be exploited remotely?
Yes, CVE-2025-6607 can be exploited remotely, allowing attackers to perform SQL injection attacks.
What kind of attack does CVE-2025-6607 facilitate?
CVE-2025-6607 facilitates SQL injection attacks through manipulation of the argument ID in the affected stock.php file.