CVE-2025-9919: 1000projects Beauty Parlour Management System bwdates-reports-details.php sql injection
A vulnerability was identified in 1000projects Beauty Parlour Management System 1.0. This affects an unknown function of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9919?
CVE-2025-9919 has a high severity rating due to its potential for SQL injection attacks.
How do I fix CVE-2025-9919?
To fix CVE-2025-9919, sanitize and validate user inputs for the fromdate and todate parameters in the /admin/bwdates-reports-details.php file.
What systems are affected by CVE-2025-9919?
CVE-2025-9919 affects version 1.0 of the 1000projects Beauty Parlour Management System.
Can CVE-2025-9919 be exploited remotely?
Yes, CVE-2025-9919 can be exploited remotely by an attacker manipulating input parameters.
What kind of attack is associated with CVE-2025-9919?
CVE-2025-9919 is associated with SQL injection attacks due to improper handling of user input.