| 제목 | Anuj Kumar Beauty Parlour Management System 1.1 SQL Injection |
|---|
| 설명 | Vulnerability Location: /forgot-password.php
Affected Range: Beauty Parlour Management System V1.1
Vulnerability Cause: forgot-password.php contains a serious security vulnerability. The manipulation of the argument contactno leads to sql injection. The attack can be launched remotely.
Vulnerability Impact: Obtain database access rights, and even DBA permissions;
Link: https://phpgurukul.com/beauty-parlour-management-system-using-php-and-mysql/ |
|---|
| 원천 | ⚠️ https://github.com/Y4y17/CVE/blob/main/Beauty%20Parlour%20Management%20System/SQL%20Injection-3.md |
|---|
| 사용자 | Y4y17 (UID 96959) |
|---|
| 제출 | 2026. 04. 02. AM 03:04 (6 개월 ago) |
|---|
| 모더레이션 | 2026. 04. 09. PM 04:23 (8 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 309059 [PHPGurukul Beauty Parlour Management System 1.1 /forgot-password.php email SQL 주입] |
|---|
| 포인트들 | 0 |
|---|