PT-2025-21623 · Unknown · Phpgurukul Beauty Parlour Management System
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
PHPGurukul Beauty Parlour Management System version 1.1
Description:
A critical issue affects the processing of the /forgot-password.php file. The manipulation of the
email argument leads to SQL injection. This issue can be exploited remotely.Recommendations:
For PHPGurukul Beauty Parlour Management System version 1.1, consider restricting access to the /forgot-password.php file until a fix is available. As a temporary workaround, avoid using the
email argument in the affected file to minimize the risk of exploitation.Exploit
Fix
Special Elements Injection
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Phpgurukul Beauty Parlour Management System