Beauty Parlour Management System vulnerabilities
4 known CVE vulnerabilities in Beauty Parlour Management System, translated and rated.
- CVE-2026-37431Critical
Beauty Parlour Management System v1.1 was found to have a SQL injection vulnerability via the aptnumber parameter in the /appointment-detail.php endpoint. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement.
- CVE-2024-53480Critical
A SQL injection vulnerability was found in Phpgurukul's Beauty Parlour Management System v1.1 in `login.php` via the `emailcont` parameter. An attacker can manipulate this parameter to execute unauthorized database queries.
- CVE-2024-51065Critical
A SQL injection vulnerability was found in Phpgurukul Beauty Parlour Management System v1.1 in admin/index.php via the username parameter. An attacker can send a malicious SQL query, leading to unauthorized database access.
- CVE-2024-51066High
An IDOR vulnerability in appointment-detail.php in Beauty Parlour Management System v1.1 allows unauthorized access to other customers' Personally Identifiable Information (PII).