Approved changes feed: RSS · Atom

cpe:2.3:a:mayurik:best_salon_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorMayurik (727a23cf-b3c3-54bf-b09e-da411a18e16c)
ProductBest Salon Management System (dfee4ad3-9b3d-5808-85bc-47e58ef9b4d3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7144 vulnerable 2026-06-03 15:12:30.569043 SourceCodester Best Salon Management System Admin Profile Page admin-profile.php cross site scripting
LOW (2.4)
A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /panel/admin-profile.php of the component Admin Profile Page. The manipulation of the argument Admin Name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-07T20:32:06.290Z
Updated: 2025-07-07T20:56:47.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7143 vulnerable 2026-06-03 15:12:30.568579 SourceCodester Best Salon Management System Update Tax Page edit-tax.php cross site scripting
LOW (2.4)
A vulnerability, which was classified as problematic, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/edit-tax.php of the component Update Tax Page. The manipulation of the argument Tax Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-07T20:02:06.460Z
Updated: 2025-07-07T20:56:08.923Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7142 vulnerable 2026-06-03 15:12:30.568018 SourceCodester Best Salon Management System search-appointment.php cross site scripting
LOW (2.4)
A vulnerability, which was classified as problematic, has been found in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /panel/search-appointment.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-07T19:32:05.870Z
Updated: 2025-07-07T20:54:04.667Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7141 vulnerable 2026-06-03 15:12:30.567669 SourceCodester Best Salon Management System Update Staff Page edit_plan.php cross site scripting
LOW (2.4)
A vulnerability classified as problematic was found in SourceCodester Best Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /panel/edit_plan.php of the component Update Staff Page. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-07T19:02:05.791Z
Updated: 2025-07-07T20:50:46.358Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7140 vulnerable 2026-06-03 15:12:30.567317 SourceCodester Best Salon Management System Update Staff Page edit-staff.php cross site scripting
LOW (2.4)
A vulnerability classified as problematic has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/edit-staff.php of the component Update Staff Page. The manipulation of the argument Staff Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-07T18:32:06.499Z
Updated: 2025-07-08T17:36:04.774Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7139 vulnerable 2026-06-03 15:12:30.566744 SourceCodester Best Salon Management System Update Customer Details Page edit-customer-detailed.php cross site scripting
LOW (2.4)
A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /panel/edit-customer-detailed.php of the component Update Customer Details Page. The manipulation of the argument Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-07T18:02:06.780Z
Updated: 2025-07-07T18:28:09.107Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7138 vulnerable 2026-06-03 15:12:30.566245 SourceCodester Best Salon Management System admin-profile.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/admin-profile.php. The manipulation of the argument adminname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-07T17:32:06.418Z
Updated: 2025-07-07T17:45:45.443Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7137 vulnerable 2026-06-03 15:12:30.565878 SourceCodester Best Salon Management System schedule-staff.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /panel/schedule-staff.php. The manipulation of the argument staff_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-07T17:02:06.425Z
Updated: 2025-07-07T17:57:31.994Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6880 vulnerable 2026-06-03 15:12:29.240804 SourceCodester Best Salon Management System edit-tax.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/edit-tax.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-30T01:02:33.533Z
Updated: 2025-06-30T17:19:58.866Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6879 vulnerable 2026-06-03 15:12:29.240341 SourceCodester Best Salon Management System add-tax.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /panel/add-tax.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-30T00:32:06.237Z
Updated: 2025-06-30T18:27:21.577Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6878 vulnerable 2026-06-03 15:12:29.239932 SourceCodester Best Salon Management System search-appointment.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-30T00:02:05.712Z
Updated: 2025-06-30T18:27:49.116Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6877 vulnerable 2026-06-03 15:12:29.239475 SourceCodester Best Salon Management System edit-category.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /panel/edit-category.php. The manipulation of the argument editid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-29T23:32:06.212Z
Updated: 2025-06-30T18:31:33.654Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6876 vulnerable 2026-06-03 15:12:29.238909 SourceCodester Best Salon Management System add-category.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /panel/add-category.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-29T23:02:06.677Z
Updated: 2025-06-30T18:37:13.367Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6875 vulnerable 2026-06-03 15:12:29.238467 SourceCodester Best Salon Management System edit-subscription.php sql injection
MEDIUM (6.3)
A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /panel/edit-subscription.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-29T22:32:06.047Z
Updated: 2025-06-30T18:44:40.564Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6874 vulnerable 2026-06-03 15:12:29.237924 SourceCodester Best Salon Management System add_subscribe.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/add_subscribe.php. The manipulation of the argument user_id/plan_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-29T22:02:06.603Z
Updated: 2025-06-30T17:23:26.060Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6862 vulnerable 2026-06-03 15:12:29.220947 SourceCodester Best Salon Management System edit_plan.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/edit_plan.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-29T14:31:05.470Z
Updated: 2025-06-30T15:32:26.235Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6861 vulnerable 2026-06-03 15:12:29.220494 SourceCodester Best Salon Management System add_plan.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /panel/add_plan.php. The manipulation of the argument plan_name/description/duration_days/price leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-29T14:00:18.916Z
Updated: 2025-06-30T15:41:40.404Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6860 vulnerable 2026-06-03 15:12:29.220003 SourceCodester Best Salon Management System staff_commision.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/staff_commision.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-29T13:00:13.680Z
Updated: 2025-06-30T15:43:24.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6859 vulnerable 2026-06-03 15:12:29.219539 SourceCodester Best Salon Management System pro_sale.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /panel/pro_sale.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-29T12:31:06.164Z
Updated: 2025-06-30T20:09:04.612Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6609 vulnerable 2026-06-03 15:12:28.291860 SourceCodester Best Salon Management System bwdates-reports-details.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /panel/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-25T14:31:08.798Z
Updated: 2025-06-25T14:42:14.388Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6608 vulnerable 2026-06-03 15:12:28.291407 SourceCodester Best Salon Management System edit-services.php sql injection
MEDIUM (6.3)
A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /panel/edit-services.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-25T14:31:06.417Z
Updated: 2025-06-25T15:00:45.967Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6607 vulnerable 2026-06-03 15:12:28.291042 SourceCodester Best Salon Management System stock.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/stock.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-25T14:00:15.777Z
Updated: 2025-06-25T14:22:42.505Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6606 vulnerable 2026-06-03 15:12:28.290544 SourceCodester Best Salon Management System add-services.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. This issue affects some unknown processing of the file /panel/add-services.php. The manipulation of the argument Type leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-25T13:31:08.116Z
Updated: 2025-06-25T14:23:39.326Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6605 vulnerable 2026-06-03 15:12:28.290043 SourceCodester Best Salon Management System edit-staff.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. This vulnerability affects unknown code of the file /panel/edit-staff.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-25T13:31:05.737Z
Updated: 2025-06-25T14:24:05.928Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6604 vulnerable 2026-06-03 15:12:28.289423 SourceCodester Best Salon Management System add-staff.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/add-staff.php. The manipulation of the argument Name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-25T13:00:12.245Z
Updated: 2025-06-25T14:24:27.926Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6583 vulnerable 2026-06-03 15:12:28.119812 SourceCodester Best Salon Management System view-appointment.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /view-appointment.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-25T00:00:15.196Z
Updated: 2025-06-25T14:25:06.447Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6582 vulnerable 2026-06-03 15:12:28.119251 SourceCodester Best Salon Management System edit-customer-detailed.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /edit-customer-detailed.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-24T23:31:06.062Z
Updated: 2025-06-25T14:25:30.695Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6581 vulnerable 2026-06-03 15:12:28.118756 SourceCodester Best Salon Management System add-customer.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-customer.php. The manipulation of the argument name/email/mobilenum/gender/details/dob/marriage_date leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-24T22:31:06.294Z
Updated: 2025-06-25T14:25:55.795Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6580 vulnerable 2026-06-03 15:12:28.118051 SourceCodester Best Salon Management System Login sql injection
HIGH (7.3)
A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the component Login. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-24T21:31:06.699Z
Updated: 2025-06-25T14:26:17.988Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12325 vulnerable 2026-06-03 14:58:44.130817 SourceCodester Best Salon Management System forgot-password.php sql injection
HIGH (7.3)
A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-10-27T20:32:12.484Z
Updated: 2025-10-28T14:49:25.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11662 vulnerable 2026-06-03 14:58:42.855575 SourceCodester Best Salon Management System booking.php sql injection
HIGH (7.3)
A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. Impacted is an unknown function of the file /booking.php. The manipulation of the argument serv_id results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.
Published: 2025-10-13T05:02:07.389Z
Updated: 2025-10-14T19:35:04.027Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11615 vulnerable 2026-06-03 14:58:42.774444 SourceCodester Best Salon Management System add_invoice.php sql injection
HIGH (7.3)
A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/add_invoice.php. Performing manipulation of the argument ServiceId results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited.
Published: 2025-10-11T21:32:06.052Z
Updated: 2025-10-14T14:53:58.073Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11614 vulnerable 2026-06-03 14:58:42.773942 SourceCodester Best Salon Management System edit-appointment.php sql injection
HIGH (7.3)
A vulnerability was identified in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /panel/edit-appointment.php. Such manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
Published: 2025-10-11T20:32:05.814Z
Updated: 2025-10-14T14:54:04.235Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.