CVE-2025-9829: PHPGurukul Beauty Parlour Management System signup.php sql injection
A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /signup.php. The manipulation of the argument mobilenumber leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9829?
CVE-2025-9829 is classified as a critical vulnerability due to the potential for remote SQL injection attacks.
How do I fix CVE-2025-9829?
To fix CVE-2025-9829, validate and sanitize all user inputs in the signup.php file to prevent SQL injection.
What systems are affected by CVE-2025-9829?
CVE-2025-9829 affects the PHPGurukul Beauty Parlour Management System version 1.1.
Can CVE-2025-9829 be exploited remotely?
Yes, CVE-2025-9829 can be exploited remotely, exposing the system to unauthorized access and data manipulation.
What type of attack does CVE-2025-9829 facilitate?
CVE-2025-9829 facilitates SQL injection attacks by manipulating the mobilenumber parameter in the signup.php file.