CVE-2025-7137: SourceCodester Best Salon Management System schedule-staff.php sql injection
Published Jul 7, 2025
·Updated
A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /panel/schedule-staff.php. The manipulation of the argument staffid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Sourcecodester Best Salon Management System
Mayurik Best Salon Management System=1.0
Event History
Jul 7, 2025
CVE Published
via MITRE·05:02 PM
Data Sourced
via MITRE·05:02 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Jun 11, 58473
Event
via NVD·11:25 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-7137?
CVE-2025-7137 has been classified as critical.
2
What vulnerability does CVE-2025-7137 present?
CVE-2025-7137 presents a SQL injection vulnerability due to manipulation of the staff_id argument.
3
Where in the SourceCodester Best Salon Management System does CVE-2025-7137 occur?
CVE-2025-7137 occurs in the file /panel/schedule-staff.php.
4
How can I mitigate the risks of CVE-2025-7137?
Mitigating the risks of CVE-2025-7137 involves validating and sanitizing user input to avoid SQL injection.
5
Which software is affected by CVE-2025-7137?
CVE-2025-7137 affects the SourceCodester Best Salon Management System version 1.0.