A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1. This issue affects some unknown processing of the file /admin/manage-services.php. Executing a manipulation of the argument delid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 5.5 · phpgurukulNVD modified 2026-10-08 13:10
Affected (CPE criteria) 1
cpe:2.3:a:phpgurukul:beauty_parlour_management_system:1.1:*:*:*:*:*:*:*
References 5
- https://github.com/f000x0/cve/issues/9 Exploit, Third Party Advisory
- https://phpgurukul.com/ Product
- https://vuldb.com/?ctiid.327629 Permissions Required, VDB Entry
- https://vuldb.com/?id.327629 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.668695 Third Party Advisory, VDB Entry