Gửi #795166: Anuj Kumar Beauty Parlour Management System 1.1 SQL Injection

Vulnerability Location: /forgot-password.php
Affected Range: Beauty Parlour Management System V1.1
Vulnerability Cause: forgot-password.php contains a serious security vulnerability. The manipulation of the argument contactno leads to sql injection. The attack can be launched remotely.
Vulnerability Impact: Obtain database access rights, and even DBA permissions;
Link: https://phpgurukul.com/beauty-parlour-management-system-using-php-and-mysql/

• Nguồn: ⚠️ https://github.com/Y4y17/CVE/blob/main/Beauty%20Parlour%20Management%20System/SQL%20Injection-3.md
• Người dùng: Y4y17 (UID 96959)
• Đệ trình: 02/04/2026 03:04 (cách đây 6 các tháng)
• Kiểm duyệt: 09/04/2026 16:23 (8 days later)
• Trạng thái: Bản sao
• Mục VulDB: 309059 [PHPGurukul Beauty Parlour Management System 1.1 /forgot-password.php email Tiêm SQL]
• điểm: 0