CVE-2025-6581

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0

Description: A critical issue was found in the SourceCodester Best Salon Management System, affecting an unknown functionality of the file /add-customer.php. The manipulation of the arguments name, email, mobilenum, gender, details, dob, marriage date leads to a SQL injection. This issue can be exploited remotely.

Recommendations: For SourceCodester Best Salon Management System version 1.0, as a temporary workaround, consider implementing proper input validation and sanitization mechanisms for the arguments name, email, mobilenum, gender, details, dob, marriage date in the /add-customer.php file until a patch is available. Apply patches or mitigations promptly once available.