CVE-2025-9933: PHPGurukul Beauty Parlour Management System view-appointment.php sql injection
A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/view-appointment.php. Such manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9933?
CVE-2025-9933 is classified as a high severity vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-9933?
To fix CVE-2025-9933, ensure input validation and parameterized queries are implemented to sanitize user input in the /admin/view-appointment.php file.
What components are affected by CVE-2025-9933?
CVE-2025-9933 affects the PHPGurukul Beauty Parlour Management System 1.1, specifically the functionality related to the /admin/view-appointment.php file.
Can CVE-2025-9933 be exploited remotely?
Yes, CVE-2025-9933 can be exploited remotely due to the nature of the SQL injection vulnerability.
What type of vulnerability is CVE-2025-9933?
CVE-2025-9933 is a SQL injection vulnerability that occurs when manipulating the argument viewid in the /admin/view-appointment.php file.