CVE-2025-6880: SourceCodester Best Salon Management System edit-tax.php sql injection
A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/edit-tax.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6880?
CVE-2025-6880 is classified as a critical vulnerability.
How does CVE-2025-6880 affect the SourceCodester Best Salon Management System?
CVE-2025-6880 affects the file /panel/edit-tax.php and allows for SQL injection via the editid argument.
Can CVE-2025-6880 be exploited remotely?
Yes, CVE-2025-6880 can be exploited remotely, allowing attackers to manipulate the affected function.
What is the impact of SQL injection in CVE-2025-6880?
SQL injection in CVE-2025-6880 can lead to unauthorized access to the database and potential data breaches.
How do I fix CVE-2025-6880 in Best Salon Management System?
To fix CVE-2025-6880, validate and sanitize user input for the editid parameter and implement prepared statements in database queries.