VULNERABILITY INTELLIGENCE
CVE-2025-10403
CVSS score7.3 HIGH
EPSS probability0.45%
CISA KEVNot currently listed
Published2025-09-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Description
A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown function of the file /admin/view-enquiry.php. The manipulation of the argument viewid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
Weakness classification
- cna@vuldb.com: CWE-74
- nvd@nist.gov: CWE-89
Primary references
- cna@vuldb.com — Exploit, Issue Tracking, Third Party Advisory
- cna@vuldb.com — Permissions Required, VDB Entry
- cna@vuldb.com — Third Party Advisory, VDB Entry
- cna@vuldb.com — Third Party Advisory, VDB Entry
- cna@vuldb.com — Third Party Advisory, VDB Entry