Mayurik
Monthly
Improper authorization in SourceCodester Pet Grooming Management Software 1.0 allows authenticated remote attackers to gain unauthorized access to the Financial Report Page, potentially viewing or modifying sensitive financial data. Public exploit code exists for this vulnerability, and no patch is currently available, leaving affected installations at risk of information disclosure and data manipulation.
Pet Grooming Management Software versions up to 1.0 contains a vulnerability that allows attackers to improper authorization (CVSS 6.3).
Gas Agency Management System versions up to 1.0 contains a vulnerability that allows attackers to improper access controls (CVSS 6.3).
Improper authorization in SourceCodester Pet Grooming Management Software 1.0 allows authenticated users to manipulate the group_id parameter in the user management component, potentially gaining unauthorized access to restricted functionality. An attacker with valid credentials can exploit this remotely, and public exploit code is already available. The vulnerability currently lacks a patch from the vendor.
The change password functionality at /pet_grooming/admin/change_pass.php in SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in SourceCodester Best House Rental Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in SourceCodester Best House Rental Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A flaw has been found in SourceCodester Best House Rental Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was detected in SourceCodester Best House Rental Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
SQL injection in SourceCodester Best Salon Management System 1.0 exposes unauthenticated remote attackers to database manipulation via the `email` parameter in the `/panel/forgot-password.php` password recovery endpoint. A public proof-of-concept exploit has been disclosed, though EPSS at 0.03% (8th percentile) and absence from CISA KEV indicate very low observed real-world exploitation. Impact is partial across confidentiality, integrity, and availability per the CVSS 4.0 scoring, consistent with a restricted database account context rather than full system compromise.
SQL injection in SourceCodester Best House Rental Management System 1.0 allows high-privilege remote attackers to manipulate the house_no parameter in the save_house function of /admin_class.php, achieving limited confidentiality and integrity impact. Publicly available exploit code exists but exploitation requires administrative credentials (PR:H), significantly restricting real-world attack surface despite the CVSS 4.0 network vector.
SQL injection in SourceCodester Best House Rental Management System 1.0 allows unauthenticated remote attackers to manipulate the Username parameter in the login2 function of /admin_class.php, enabling authentication bypass or database enumeration. A public proof-of-concept exploit has been published on GitHub, confirming exploitability. No KEV listing and a low EPSS score (0.03%, 8th percentile) suggest exploitation remains opportunistic and low-volume, consistent with the niche deployment footprint of this PHP script.
SQL injection in Best Salon Management System 1.0 allows remote attackers to manipulate the serv_id parameter in /booking.php, potentially gaining unauthorized access to the database or modifying data. A public exploit is available, though EPSS assigns a low exploitation probability (0.03%). No active exploitation is reported.
SQL injection in SourceCodester Best Salon Management System 1.0 allows unauthenticated remote attackers to manipulate the ServiceId parameter in /panel/add_invoice.php, potentially accessing or modifying database contents. Public proof-of-concept code is available, though EPSS indicates low exploitation probability (0.03%) and no active exploitation is confirmed.
SQL injection in SourceCodester Best Salon Management System 1.0 allows remote attackers to compromise the application database via the editid parameter in /panel/edit-appointment.php. Publicly available exploit code exists, and the vulnerability can be triggered without authentication. EPSS score is 0.03%, indicating low exploitation probability despite the easy remote attack vector.
SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the Customer Name field under Customer Management Section.
A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A flaw has been found in SourceCodester Pet Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A flaw has been found in itsourcecode Online Tour and Travel Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was detected in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Cross-site scripting in Best Salon Management System 1.0 allows authenticated administrators to inject JavaScript via the Admin Name field on the admin profile page, with a publicly available proof-of-concept exploit. While the attack requires high privileges, a crafted payload could execute in another admin's browser when viewing the profile, leading to session token theft or interface manipulation.
Stored cross-site scripting in Best Salon Management System 1.0 allows an authenticated attacker with high privileges to inject malicious scripts via the 'Tax Name' parameter on the Update Tax page. The injected script executes when another user views the affected page, potentially enabling session hijacking or phishing attacks. Exploit code is publicly available, but no active exploitation has been confirmed; EPSS indicates a very low likelihood of widespread exploitation.
Cross-site scripting (XSS) in Best Salon Management System 1.0 allows a high-privileged attacker to inject malicious scripts via the search-appointment.php endpoint. An unauthenticated victim user passively interacting with the injected content may suffer low integrity impact in their browser session. The vulnerability has a publicly available proof-of-concept but is not known to be actively exploited.
Cross-site scripting in Best Salon Management System 1.0's Update Staff Page allows authenticated admin-level attackers to inject malicious scripts via the /panel/edit_plan.php endpoint. A publicly available exploit exists, but the EPSS score is negligible (0.04%) and no active exploitation has been reported. The vulnerability requires high privileges and user interaction, limiting its real-world severity.
Cross-site scripting in Best Salon Management System 1.0 allows authenticated high-privilege users to inject malicious scripts via the Staff Name field on the edit-staff page. A remote attacker with admin access can store a payload that executes in the browser of another admin who views the staff listing, potentially leading to session hijacking or defacement. Publicly available exploit code exists, but no active exploitation has been confirmed.
Stored cross-site scripting in Best Salon Management System 1.0 enables authenticated high-privilege attackers to inject arbitrary JavaScript via the 'Name' parameter on the edit-customer-detailed.php page. The flaw has public exploit code but no active exploitation per CISA KEV, and EPSS indicates a very low exploitation probability (0.04%).
SQL injection in Best Salon Management System 1.0 allows authenticated remote attackers to inject malicious SQL via the adminname parameter in /panel/admin-profile.php, potentially leading to data leakage or tampering. Despite being publicly disclosed with proof-of-concept code, the actual impact is limited according to CVSS 4.0 (score 2.1), and EPSS predicts a low exploitation probability (0.06%).
SQL injection in Best Salon Management System 1.0 allows authenticated remote attackers with low privileges to execute arbitrary SQL commands via the staff_id parameter in the /panel/s
SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated attackers with low privileges to manipulate the editid parameter in /panel/edit-tax.php to execute arbitrary SQL queries, potentially leading to unauthorized data access or modification.
SQL injection in Best Salon Management System 1.0 allows remote attackers to inject SQL via the 'Name' parameter in /panel/add-tax.php. The exploit is publicly available, though real-world risk is limited due to the product's low deployment footprint. EPSS of 0.06% indicates very low probability of active exploitation, and no CISA KEV entry suggests no current in-the-wild use.
SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated low-privilege users to execute arbitrary SQL via the searchdata parameter in /panel/search-appointment.php. Exploit code is publicly available, but no active exploitation has been confirmed. An attacker with a valid account can read, modify, or delete salon booking data.
SQL injection in SourceCodester Best Salon Management System 1.0 allows remote attackers with low privileges to manipulate the editid parameter in /panel/edit-category.php, leading to potential data leakage or modification. A public proof-of-concept exploit is available, but no active exploitation is confirmed (EPSS score 0.08%) and the vulnerability is not listed in CISA KEV.
SQL injection in Best Salon Management System 1.0 allows remote authenticated attackers to manipulate database queries via the 'Name' parameter of /panel/add-category.php. Publicly available exploit code exists, increasing the risk of opportunistic attacks. No active exploitation has been reported in CISA KEV, but the low-complexity flaw can lead to unauthorized data access or modification.
Limited SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated remote attackers to manipulate database queries via the editid parameter in /panel/edit-subscription.php. The vulnerability has a publicly available proof-of-concept exploit and may result in low-impact data access or modification, though no active exploitation has been confirmed by CISA KEV.
SQL injection in Best Salon Management System 1.0 via the user_id/plan_id parameters of /panel/add_subscribe.php allows remote attackers with low-privilege credentials to manipulate database queries, potentially leading to unauthorized data access or modification. A publicly available exploit exists, but no active exploitation has been reported in the wild. The CVSS 4.0 base metrics indicate only limited impact on confidentiality, integrity, and availability.
SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated remote attackers with low privileges to manipulate the editid parameter in /panel/edit_plan.php, leading to unauthorized database access or modification. Publicly available exploit code exists, but EPSS estimates a low 0.06% likelihood of exploitation, and it is not listed in CISA's Known Exploited Vulnerabilities catalog.
SQL injection in Best Salon Management System 1.0 allows authenticated remote attackers to manipulate database queries via plan_name, description, duration_days, and price parameters in /panel/add_plan.php. An attacker with low-privileged access can extract or modify data through publicly available exploit code, though no active exploitation has been confirmed.
SQL injection in Best Salon Management System 1.0 allows remote attackers to manipulate database queries via the fromdate/todate parameters in /panel/staff_commision.php. Public exploit code exists, but no active exploitation is confirmed. The CVSS 4.0 base score is 2.1 (Low), though the reporter assigns a critical severity, likely due to different scoring versions.
SQL injection in Best Salon Management System 1.0 via the /panel/pro_s
SQL injection in Best Salon Management System 1.0 allows remote authenticated attackers to query the application database via the fromdate and todate parameters in /panel/bwdates-reports-details.php. The vulnerability has a low CVSS 4.0 base score (impacts limited to low confidentiality, integrity, availability), with a 0.06% EPSS and no known in-the-wild exploitation despite a publicly disclosed exploit.
SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated remote attackers to manipulate database queries via the 'editid' parameter in the '/panel/edit-services.php' endpoint. Exploit code is publicly available, though the EPSS score (0.06%) indicates a low probability of exploitation in the wild.
SQL injection in Best Salon Management System 1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the ID parameter of /panel/stock.php. Exploit code is publicly available, though no active exploitation has been confirmed.
SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated attackers to manipulate database queries via the Type parameter in /panel/add-services.php. Publicly available exploit code exists, but no active exploitation has been confirmed through CISA KEV. The EPSS score of 0.06% suggests a low probability of widespread exploitation.
We are tasked with producing a comprehensive analysis JSON object. Let's extract data from the input. CVE: CVE-2025-6605 Description: A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. This vulnerability affects unknown code of the file /panel/edit-staff.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. CVSS Score: 2.1 (given; but note the vector is 4.0 and score 2.1 is low; possibly the base score of a 4.0 vector: AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N -> that gives a score around 2.0-2.3? Let's check CVSS 4.0 calculator: AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N = base score 2.1 (low). So CVSS 4.0 score 2.1 low severity. The description says "classified as critical" but CVSS base score is low. This might be a discrepancy: the vulnerability is SQL injection but the impact is limited (low integrity, low confidentiality, low availability) likely because of the privileges required (PR:L) and the impact being limited to the application. We'll note that. CWE: CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')). That's a broad category, but SQL injection is CWE-89, so CWE-74 is a parent. So we'll mention it. EPSS: 0.06%, 18th percentile (low likelihood of widespread exploitation) POC/Exploit: Publicly available (the references include a GitHub link) KEV: Not mentioned, so not in KEV. So "no public exploit identified at time of analysis" is wrong; there is public exploit. So we'll use "publicly available exploit code exists" (since POC exists). KEV not present so not actively exploited by that metric. Tags: PHP, SQLi CPE: cpe:2.3:a:mayurik:best_salon_management_system:1.0:*:*:*:*:*:*:* — that's the affected product. So product name: "Best Salon Management System" (by Mayurik). But the description says SourceCodester Best Salon Management System. Probably SourceCodester is the source, vendor Mayurik? We'll use "Best Salon Management System" as product name. Now, for each field: product_name: "Best Salon Management System" (1-3 words). So "Best Salon Management System" fits. summary: Need a synthesis. Impact: SQL injection via editid parameter in /panel/edit-staff.php. Remote attack, but requires privileges (PR:L from CVSS, so authenticated? CVSS vector says PR:L, so low privilege, likely a logged-in user). The EPSS is low, but exploit code exists. CVSS base score low (2.1). So summary: "SQL injection in SourceCodester Best Salon Management System 1.0 allows remote authenticated users to inject SQL via the editid parameter in /panel/edit-staff.php. Exploit code is publicly available, but EPSS exploitation probability is low (0.06%). No active exploitation reported (not in KEV)." technical_context: Explain technology: PHP application, SQL injection. The CWE is CWE-74 (Injection). The specific file /panel/edit-staff.php is part of staff editing functionality. The root cause: improper validation/sanitization of the editid parameter, which is directly used in SQL query. The CPE confirms the specific product and version. So mention PHP and SQLi. risk_assessment: CVSS 4.0: AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N — remote network attack, low attack complexity, no user interaction, low privilege required, low impact on confidentiality, integrity, availability, no scope change. Score 2.1 (Low). But the description says "critical" which is inconsistent; we must highlight that CVSS base score is actually low. EPSS 0.06% (low). POC exists but not known to be actively exploited. So risk is low: low privilege required and limited impact, combined with low EPSS, suggest this is a low-priority issue despite the "critical" classification in the description. Also note: the CVSS vector shows PR:L, so authentication needed, limiting attack surface. affected_products: Product: SourceCodester Best Salon Management System version 1.0. CPE: cpe:2.3:a:mayurik:best_salon_management_system:1.0. Advisory references from VulDB. So write: "SourceCodester Best Salon Management System version 1.0 is affected. The vulnerability is in the /panel/edit-staff.php file. Vendor advisory is available at VulDB (https://vuldb.com/?id.313822) and a PoC exploit is hosted on GitHub (https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-6.md)." remediation: No patch explicitly mentioned. We need to check input: the description does not mention a fix version, and the references include VulDB entries that might have patch info, but input does not mention a patch. The patch field is not provided, so we must state "No vendor-released patch identified at time of analysis." But we can suggest mitigating controls: restrict access to /panel/edit-staff.php to trusted users, implement input validation/sanitization for the editid parameter, use parameterized queries. Since the vulnerability requires authentication, ensure strong password policies and limit access to admin panel. Note trade-offs. So we'll write: "No official patch is available from the vendor at the time of analysis. As a workaround, restrict access to the administrative panel (/panel/) to trusted IP addresses and require strong authentication. Implement input validation and parameterized queries to prevent SQL injection in the editid parameter. Alternatively, consider disabling the vulnerable functionality if possible, though this may break staff editing features." Specific, actionable. exploit_scenario: "An authenticated low-privileged user sends a crafted editid parameter in a request to /panel/edit-staff.php to inject SQL commands, potentially extracting database contents or altering records." (Since the CVSS impact: low on all three, so not full database compromise, but still data exposure and manipulation). Since exploit is public, an attacker could use the PoC. exploitation_conditions: Conditions: attacker must be authenticated (low privilege), as indicated by CVSS PR:L. No specific non-default configuration required beyond the application being deployed. So we state: "Low-privileged authenticated access to the application's administrative panel is required; no other special conditions are needed beyond default installation." Not just "network access required" generic. We add: "The vulnerability is in /panel/edit-staff.php, so the attacker must have a valid user account with privilege to edit staff (or at least access the panel)." So exact feature: staff editing functionality. That's a concrete condition. attack_chain: Will use 4-step? Steps: Access authenticated session → Send crafted editid parameter → SQL injection executes → Data leakage/manipulation. So: "Authenticate to Best Salon Management System panel → Send crafted HTTP request to /panel/edit-staff.php with malicious editid parameter → SQL injection executes against backend database → Extract or modify database records." With limited impact, so no code execution. confidence_notes: "Exploit code is publicly available, confirmed by GitHub repository. No vendor patch identified; affected product versions confirmed via CPE. EPSS and CVSS derived from VulDB; CVSS 4.0 score is low despite 'critical' classification in description, likely due to the low privileges and limited impact." Also, CWE-74 is broad; the underlying issue is SQL injection. The data from VulDB is the primary source; no NVD analysis yet (just references). So note that. prevalence: "low" – Best Salon Management System is a niche product for salon management, likely small business usage, not ubiquitous. So prevalence: low. prevalence_basis: "niche salon management system, limited enterprise deployment" (less than 12 words). So "low deployment footprint for a specialized salon management application." assessed_cvss_vector: Our independent assessment? Based on description and CVSS 4.0 vector given, it's already a 4.0 vector. We need to provide CVSS 3.1 vector equivalent. We'll convert the 4.0 vector to 3.1 as best we can: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L. That matches 3.1 base score: (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) = 6.5 (Medium). Wait, that would be 6.5, not 2.1. The given CVSS 4.0 vector has low impact on VC/VI/VA, which in 4.0 yields low severity because the impact metrics are weighted differently. In 3.1, L/L/L for C/I/A gives 0.22 impact sub-score and 6.5 base. But our vector must be consistent with the actual severity. According to the CVSS 4.0 specification, a vector with AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N yields a score of 2.1 (Low). If we translate that to 3.1, it would be AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L = 6.5, which is Medium. This suggests the 4.0 vector "downgrades" because impact is low? Wait, in 3.1, L/L/L for a low-privilege attack is Medium, not Low. The CVSS 4.0 introduces new severity levels; low score 2.1 might be "Low" in 4.0, but in 3.1 it would be "Medium". So to be independent, we can provide a 3.1 vector that reflects the actual technical risk. But we are asked to provide an independent assessment, grounded in description. I'll assess: The vulnerability is SQL injection, remote, authenticated (low privilege), no user interaction, scope unchanged, impact likely low on confidentiality, integrity, availability? For SQL injection, usually you can extract data, modify data, and possibly cause denial by dropping tables. So impact could be high, but from CVSS it's limited to low maybe because the vulnerable parameter only affects a specific table and the user has low privileges? The description doesn't specify. Given the public exploit likely shows limited injection, but a skilled attacker could escalate. To be cautious, I'd set C:L/I:L/A:L if authentication is needed. So my independent 3.1 vector: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L (score 6.5). I'll provide that with rationale: "Requires low-privilege authentication, no user interaction, and limited data exposure in default configuration; however, SQL injection can potentially escalate impact." But I'll note that the given CVSS 4.0 vector shows low impact, and I'll reflect that. Actually, the input includes a CVSS vector already, so I could just use that 4.0 vector for assessed_cvss40_vector, but the instruction says "Your OWN independent CVSS 3.1 base-metric vector for THIS vulnerability, grounded in the description and exploitation conditions — NOT a copy of any score in the input." So I'll create my own 3.1, and also a 4.0 that's consistent with my 3.1. Since the input's 4.0 has low impact and low score, my independent assessment might produce a higher impact (e.g., C:H/I:H/A:H) for SQLi, but I need to be grounded in description: The description says it leads to SQL injection, but the CVSS 4.0 given says low impact on all three. Why? Possibly because the attacker is only low privilege and the database user might also have limited permissions, or the injection point is such that only simple injection possible? The description doesn't elaborate. However, typical SQL injection can lead to full database compromise. But the authoritative source is the VulDB entry which assigned low impact. It's risky to overrule that without further data. I'll stick to a moderate approach: I'll assign C:L/I:L/A:L, acknowledging that higher impact might be possible but not confirmed. So rationale: "Authenticated SQL injection with limited impact likely due to restricted database permissions, but could potentially be escalated." So 3.1 vector: CVSS:3.1
SQL injection in Best Salon Management System 1.0 through the Name parameter in /panel/add-staff.php allows authenticated remote attackers to read, modify, or delete database contents. Publicly available exploit code exists, but the low EPSS score (0.06%) and low CVSS impact suggest limited real-world exploitation risk.
SQL injection in Best Salon Management System 1.0 allows remote attackers with low privileges to manipulate database queries via the viewid parameter in /view-appointment.php. A public proof-of-concept exploit exists but active exploitation is not confirmed. The flaw can lead to unauthorized data access or modification.
SQL injection in SourceCodester Best Salon Management System 1.0 allows remote authenticated attackers to manipulate the editid parameter in /edit-customer-detailed.php, potentially leading to unauthorized data access or modification. A publicly available proof-of-concept exploit exists, but no active exploitation has been confirmed.
SQL injection in SourceCodester Best Salon Management System 1.0 allows low-privileged authenticated attackers to extract or modify database content via the /add-customer.php endpoint. Public exploit code is available, lowering the barrier for exploitation, though no active exploitation has been confirmed (not in CISA KEV) and EPSS indicates a low probability of widespread attacks (0.06%).
CVE-2025-6580 is a critical SQL injection vulnerability in SourceCodester Best Salon Management System 1.0 affecting the Login component's Username parameter. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary SQL queries, potentially leading to unauthorized data access, modification, or deletion. The vulnerability has been publicly disclosed with proof-of-concept code available, increasing exploitation risk.
A vulnerability was found in SourceCodester Best Online News Portal 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/change_pass.php via the password parameter. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
SourceCodester Best Employee Management System 1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/Operation/User.php page. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the website_image, fname, lname, contact, username, and address parameters. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Improper authorization in SourceCodester Pet Grooming Management Software 1.0 allows authenticated remote attackers to gain unauthorized access to the Financial Report Page, potentially viewing or modifying sensitive financial data. Public exploit code exists for this vulnerability, and no patch is currently available, leaving affected installations at risk of information disclosure and data manipulation.
Pet Grooming Management Software versions up to 1.0 contains a vulnerability that allows attackers to improper authorization (CVSS 6.3).
Gas Agency Management System versions up to 1.0 contains a vulnerability that allows attackers to improper access controls (CVSS 6.3).
Improper authorization in SourceCodester Pet Grooming Management Software 1.0 allows authenticated users to manipulate the group_id parameter in the user management component, potentially gaining unauthorized access to restricted functionality. An attacker with valid credentials can exploit this remotely, and public exploit code is already available. The vulnerability currently lacks a patch from the vendor.
The change password functionality at /pet_grooming/admin/change_pass.php in SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in SourceCodester Best House Rental Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in SourceCodester Best House Rental Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A flaw has been found in SourceCodester Best House Rental Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was detected in SourceCodester Best House Rental Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
SQL injection in SourceCodester Best Salon Management System 1.0 exposes unauthenticated remote attackers to database manipulation via the `email` parameter in the `/panel/forgot-password.php` password recovery endpoint. A public proof-of-concept exploit has been disclosed, though EPSS at 0.03% (8th percentile) and absence from CISA KEV indicate very low observed real-world exploitation. Impact is partial across confidentiality, integrity, and availability per the CVSS 4.0 scoring, consistent with a restricted database account context rather than full system compromise.
SQL injection in SourceCodester Best House Rental Management System 1.0 allows high-privilege remote attackers to manipulate the house_no parameter in the save_house function of /admin_class.php, achieving limited confidentiality and integrity impact. Publicly available exploit code exists but exploitation requires administrative credentials (PR:H), significantly restricting real-world attack surface despite the CVSS 4.0 network vector.
SQL injection in SourceCodester Best House Rental Management System 1.0 allows unauthenticated remote attackers to manipulate the Username parameter in the login2 function of /admin_class.php, enabling authentication bypass or database enumeration. A public proof-of-concept exploit has been published on GitHub, confirming exploitability. No KEV listing and a low EPSS score (0.03%, 8th percentile) suggest exploitation remains opportunistic and low-volume, consistent with the niche deployment footprint of this PHP script.
SQL injection in Best Salon Management System 1.0 allows remote attackers to manipulate the serv_id parameter in /booking.php, potentially gaining unauthorized access to the database or modifying data. A public exploit is available, though EPSS assigns a low exploitation probability (0.03%). No active exploitation is reported.
SQL injection in SourceCodester Best Salon Management System 1.0 allows unauthenticated remote attackers to manipulate the ServiceId parameter in /panel/add_invoice.php, potentially accessing or modifying database contents. Public proof-of-concept code is available, though EPSS indicates low exploitation probability (0.03%) and no active exploitation is confirmed.
SQL injection in SourceCodester Best Salon Management System 1.0 allows remote attackers to compromise the application database via the editid parameter in /panel/edit-appointment.php. Publicly available exploit code exists, and the vulnerability can be triggered without authentication. EPSS score is 0.03%, indicating low exploitation probability despite the easy remote attack vector.
SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the Customer Name field under Customer Management Section.
A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A flaw has been found in SourceCodester Pet Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A flaw has been found in itsourcecode Online Tour and Travel Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was detected in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Cross-site scripting in Best Salon Management System 1.0 allows authenticated administrators to inject JavaScript via the Admin Name field on the admin profile page, with a publicly available proof-of-concept exploit. While the attack requires high privileges, a crafted payload could execute in another admin's browser when viewing the profile, leading to session token theft or interface manipulation.
Stored cross-site scripting in Best Salon Management System 1.0 allows an authenticated attacker with high privileges to inject malicious scripts via the 'Tax Name' parameter on the Update Tax page. The injected script executes when another user views the affected page, potentially enabling session hijacking or phishing attacks. Exploit code is publicly available, but no active exploitation has been confirmed; EPSS indicates a very low likelihood of widespread exploitation.
Cross-site scripting (XSS) in Best Salon Management System 1.0 allows a high-privileged attacker to inject malicious scripts via the search-appointment.php endpoint. An unauthenticated victim user passively interacting with the injected content may suffer low integrity impact in their browser session. The vulnerability has a publicly available proof-of-concept but is not known to be actively exploited.
Cross-site scripting in Best Salon Management System 1.0's Update Staff Page allows authenticated admin-level attackers to inject malicious scripts via the /panel/edit_plan.php endpoint. A publicly available exploit exists, but the EPSS score is negligible (0.04%) and no active exploitation has been reported. The vulnerability requires high privileges and user interaction, limiting its real-world severity.
Cross-site scripting in Best Salon Management System 1.0 allows authenticated high-privilege users to inject malicious scripts via the Staff Name field on the edit-staff page. A remote attacker with admin access can store a payload that executes in the browser of another admin who views the staff listing, potentially leading to session hijacking or defacement. Publicly available exploit code exists, but no active exploitation has been confirmed.
Stored cross-site scripting in Best Salon Management System 1.0 enables authenticated high-privilege attackers to inject arbitrary JavaScript via the 'Name' parameter on the edit-customer-detailed.php page. The flaw has public exploit code but no active exploitation per CISA KEV, and EPSS indicates a very low exploitation probability (0.04%).
SQL injection in Best Salon Management System 1.0 allows authenticated remote attackers to inject malicious SQL via the adminname parameter in /panel/admin-profile.php, potentially leading to data leakage or tampering. Despite being publicly disclosed with proof-of-concept code, the actual impact is limited according to CVSS 4.0 (score 2.1), and EPSS predicts a low exploitation probability (0.06%).
SQL injection in Best Salon Management System 1.0 allows authenticated remote attackers with low privileges to execute arbitrary SQL commands via the staff_id parameter in the /panel/s
SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated attackers with low privileges to manipulate the editid parameter in /panel/edit-tax.php to execute arbitrary SQL queries, potentially leading to unauthorized data access or modification.
SQL injection in Best Salon Management System 1.0 allows remote attackers to inject SQL via the 'Name' parameter in /panel/add-tax.php. The exploit is publicly available, though real-world risk is limited due to the product's low deployment footprint. EPSS of 0.06% indicates very low probability of active exploitation, and no CISA KEV entry suggests no current in-the-wild use.
SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated low-privilege users to execute arbitrary SQL via the searchdata parameter in /panel/search-appointment.php. Exploit code is publicly available, but no active exploitation has been confirmed. An attacker with a valid account can read, modify, or delete salon booking data.
SQL injection in SourceCodester Best Salon Management System 1.0 allows remote attackers with low privileges to manipulate the editid parameter in /panel/edit-category.php, leading to potential data leakage or modification. A public proof-of-concept exploit is available, but no active exploitation is confirmed (EPSS score 0.08%) and the vulnerability is not listed in CISA KEV.
SQL injection in Best Salon Management System 1.0 allows remote authenticated attackers to manipulate database queries via the 'Name' parameter of /panel/add-category.php. Publicly available exploit code exists, increasing the risk of opportunistic attacks. No active exploitation has been reported in CISA KEV, but the low-complexity flaw can lead to unauthorized data access or modification.
Limited SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated remote attackers to manipulate database queries via the editid parameter in /panel/edit-subscription.php. The vulnerability has a publicly available proof-of-concept exploit and may result in low-impact data access or modification, though no active exploitation has been confirmed by CISA KEV.
SQL injection in Best Salon Management System 1.0 via the user_id/plan_id parameters of /panel/add_subscribe.php allows remote attackers with low-privilege credentials to manipulate database queries, potentially leading to unauthorized data access or modification. A publicly available exploit exists, but no active exploitation has been reported in the wild. The CVSS 4.0 base metrics indicate only limited impact on confidentiality, integrity, and availability.
SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated remote attackers with low privileges to manipulate the editid parameter in /panel/edit_plan.php, leading to unauthorized database access or modification. Publicly available exploit code exists, but EPSS estimates a low 0.06% likelihood of exploitation, and it is not listed in CISA's Known Exploited Vulnerabilities catalog.
SQL injection in Best Salon Management System 1.0 allows authenticated remote attackers to manipulate database queries via plan_name, description, duration_days, and price parameters in /panel/add_plan.php. An attacker with low-privileged access can extract or modify data through publicly available exploit code, though no active exploitation has been confirmed.
SQL injection in Best Salon Management System 1.0 allows remote attackers to manipulate database queries via the fromdate/todate parameters in /panel/staff_commision.php. Public exploit code exists, but no active exploitation is confirmed. The CVSS 4.0 base score is 2.1 (Low), though the reporter assigns a critical severity, likely due to different scoring versions.
SQL injection in Best Salon Management System 1.0 via the /panel/pro_s
SQL injection in Best Salon Management System 1.0 allows remote authenticated attackers to query the application database via the fromdate and todate parameters in /panel/bwdates-reports-details.php. The vulnerability has a low CVSS 4.0 base score (impacts limited to low confidentiality, integrity, availability), with a 0.06% EPSS and no known in-the-wild exploitation despite a publicly disclosed exploit.
SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated remote attackers to manipulate database queries via the 'editid' parameter in the '/panel/edit-services.php' endpoint. Exploit code is publicly available, though the EPSS score (0.06%) indicates a low probability of exploitation in the wild.
SQL injection in Best Salon Management System 1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the ID parameter of /panel/stock.php. Exploit code is publicly available, though no active exploitation has been confirmed.
SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated attackers to manipulate database queries via the Type parameter in /panel/add-services.php. Publicly available exploit code exists, but no active exploitation has been confirmed through CISA KEV. The EPSS score of 0.06% suggests a low probability of widespread exploitation.
We are tasked with producing a comprehensive analysis JSON object. Let's extract data from the input. CVE: CVE-2025-6605 Description: A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. This vulnerability affects unknown code of the file /panel/edit-staff.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. CVSS Score: 2.1 (given; but note the vector is 4.0 and score 2.1 is low; possibly the base score of a 4.0 vector: AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N -> that gives a score around 2.0-2.3? Let's check CVSS 4.0 calculator: AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N = base score 2.1 (low). So CVSS 4.0 score 2.1 low severity. The description says "classified as critical" but CVSS base score is low. This might be a discrepancy: the vulnerability is SQL injection but the impact is limited (low integrity, low confidentiality, low availability) likely because of the privileges required (PR:L) and the impact being limited to the application. We'll note that. CWE: CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')). That's a broad category, but SQL injection is CWE-89, so CWE-74 is a parent. So we'll mention it. EPSS: 0.06%, 18th percentile (low likelihood of widespread exploitation) POC/Exploit: Publicly available (the references include a GitHub link) KEV: Not mentioned, so not in KEV. So "no public exploit identified at time of analysis" is wrong; there is public exploit. So we'll use "publicly available exploit code exists" (since POC exists). KEV not present so not actively exploited by that metric. Tags: PHP, SQLi CPE: cpe:2.3:a:mayurik:best_salon_management_system:1.0:*:*:*:*:*:*:* — that's the affected product. So product name: "Best Salon Management System" (by Mayurik). But the description says SourceCodester Best Salon Management System. Probably SourceCodester is the source, vendor Mayurik? We'll use "Best Salon Management System" as product name. Now, for each field: product_name: "Best Salon Management System" (1-3 words). So "Best Salon Management System" fits. summary: Need a synthesis. Impact: SQL injection via editid parameter in /panel/edit-staff.php. Remote attack, but requires privileges (PR:L from CVSS, so authenticated? CVSS vector says PR:L, so low privilege, likely a logged-in user). The EPSS is low, but exploit code exists. CVSS base score low (2.1). So summary: "SQL injection in SourceCodester Best Salon Management System 1.0 allows remote authenticated users to inject SQL via the editid parameter in /panel/edit-staff.php. Exploit code is publicly available, but EPSS exploitation probability is low (0.06%). No active exploitation reported (not in KEV)." technical_context: Explain technology: PHP application, SQL injection. The CWE is CWE-74 (Injection). The specific file /panel/edit-staff.php is part of staff editing functionality. The root cause: improper validation/sanitization of the editid parameter, which is directly used in SQL query. The CPE confirms the specific product and version. So mention PHP and SQLi. risk_assessment: CVSS 4.0: AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N — remote network attack, low attack complexity, no user interaction, low privilege required, low impact on confidentiality, integrity, availability, no scope change. Score 2.1 (Low). But the description says "critical" which is inconsistent; we must highlight that CVSS base score is actually low. EPSS 0.06% (low). POC exists but not known to be actively exploited. So risk is low: low privilege required and limited impact, combined with low EPSS, suggest this is a low-priority issue despite the "critical" classification in the description. Also note: the CVSS vector shows PR:L, so authentication needed, limiting attack surface. affected_products: Product: SourceCodester Best Salon Management System version 1.0. CPE: cpe:2.3:a:mayurik:best_salon_management_system:1.0. Advisory references from VulDB. So write: "SourceCodester Best Salon Management System version 1.0 is affected. The vulnerability is in the /panel/edit-staff.php file. Vendor advisory is available at VulDB (https://vuldb.com/?id.313822) and a PoC exploit is hosted on GitHub (https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-6.md)." remediation: No patch explicitly mentioned. We need to check input: the description does not mention a fix version, and the references include VulDB entries that might have patch info, but input does not mention a patch. The patch field is not provided, so we must state "No vendor-released patch identified at time of analysis." But we can suggest mitigating controls: restrict access to /panel/edit-staff.php to trusted users, implement input validation/sanitization for the editid parameter, use parameterized queries. Since the vulnerability requires authentication, ensure strong password policies and limit access to admin panel. Note trade-offs. So we'll write: "No official patch is available from the vendor at the time of analysis. As a workaround, restrict access to the administrative panel (/panel/) to trusted IP addresses and require strong authentication. Implement input validation and parameterized queries to prevent SQL injection in the editid parameter. Alternatively, consider disabling the vulnerable functionality if possible, though this may break staff editing features." Specific, actionable. exploit_scenario: "An authenticated low-privileged user sends a crafted editid parameter in a request to /panel/edit-staff.php to inject SQL commands, potentially extracting database contents or altering records." (Since the CVSS impact: low on all three, so not full database compromise, but still data exposure and manipulation). Since exploit is public, an attacker could use the PoC. exploitation_conditions: Conditions: attacker must be authenticated (low privilege), as indicated by CVSS PR:L. No specific non-default configuration required beyond the application being deployed. So we state: "Low-privileged authenticated access to the application's administrative panel is required; no other special conditions are needed beyond default installation." Not just "network access required" generic. We add: "The vulnerability is in /panel/edit-staff.php, so the attacker must have a valid user account with privilege to edit staff (or at least access the panel)." So exact feature: staff editing functionality. That's a concrete condition. attack_chain: Will use 4-step? Steps: Access authenticated session → Send crafted editid parameter → SQL injection executes → Data leakage/manipulation. So: "Authenticate to Best Salon Management System panel → Send crafted HTTP request to /panel/edit-staff.php with malicious editid parameter → SQL injection executes against backend database → Extract or modify database records." With limited impact, so no code execution. confidence_notes: "Exploit code is publicly available, confirmed by GitHub repository. No vendor patch identified; affected product versions confirmed via CPE. EPSS and CVSS derived from VulDB; CVSS 4.0 score is low despite 'critical' classification in description, likely due to the low privileges and limited impact." Also, CWE-74 is broad; the underlying issue is SQL injection. The data from VulDB is the primary source; no NVD analysis yet (just references). So note that. prevalence: "low" – Best Salon Management System is a niche product for salon management, likely small business usage, not ubiquitous. So prevalence: low. prevalence_basis: "niche salon management system, limited enterprise deployment" (less than 12 words). So "low deployment footprint for a specialized salon management application." assessed_cvss_vector: Our independent assessment? Based on description and CVSS 4.0 vector given, it's already a 4.0 vector. We need to provide CVSS 3.1 vector equivalent. We'll convert the 4.0 vector to 3.1 as best we can: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L. That matches 3.1 base score: (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) = 6.5 (Medium). Wait, that would be 6.5, not 2.1. The given CVSS 4.0 vector has low impact on VC/VI/VA, which in 4.0 yields low severity because the impact metrics are weighted differently. In 3.1, L/L/L for C/I/A gives 0.22 impact sub-score and 6.5 base. But our vector must be consistent with the actual severity. According to the CVSS 4.0 specification, a vector with AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N yields a score of 2.1 (Low). If we translate that to 3.1, it would be AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L = 6.5, which is Medium. This suggests the 4.0 vector "downgrades" because impact is low? Wait, in 3.1, L/L/L for a low-privilege attack is Medium, not Low. The CVSS 4.0 introduces new severity levels; low score 2.1 might be "Low" in 4.0, but in 3.1 it would be "Medium". So to be independent, we can provide a 3.1 vector that reflects the actual technical risk. But we are asked to provide an independent assessment, grounded in description. I'll assess: The vulnerability is SQL injection, remote, authenticated (low privilege), no user interaction, scope unchanged, impact likely low on confidentiality, integrity, availability? For SQL injection, usually you can extract data, modify data, and possibly cause denial by dropping tables. So impact could be high, but from CVSS it's limited to low maybe because the vulnerable parameter only affects a specific table and the user has low privileges? The description doesn't specify. Given the public exploit likely shows limited injection, but a skilled attacker could escalate. To be cautious, I'd set C:L/I:L/A:L if authentication is needed. So my independent 3.1 vector: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L (score 6.5). I'll provide that with rationale: "Requires low-privilege authentication, no user interaction, and limited data exposure in default configuration; however, SQL injection can potentially escalate impact." But I'll note that the given CVSS 4.0 vector shows low impact, and I'll reflect that. Actually, the input includes a CVSS vector already, so I could just use that 4.0 vector for assessed_cvss40_vector, but the instruction says "Your OWN independent CVSS 3.1 base-metric vector for THIS vulnerability, grounded in the description and exploitation conditions — NOT a copy of any score in the input." So I'll create my own 3.1, and also a 4.0 that's consistent with my 3.1. Since the input's 4.0 has low impact and low score, my independent assessment might produce a higher impact (e.g., C:H/I:H/A:H) for SQLi, but I need to be grounded in description: The description says it leads to SQL injection, but the CVSS 4.0 given says low impact on all three. Why? Possibly because the attacker is only low privilege and the database user might also have limited permissions, or the injection point is such that only simple injection possible? The description doesn't elaborate. However, typical SQL injection can lead to full database compromise. But the authoritative source is the VulDB entry which assigned low impact. It's risky to overrule that without further data. I'll stick to a moderate approach: I'll assign C:L/I:L/A:L, acknowledging that higher impact might be possible but not confirmed. So rationale: "Authenticated SQL injection with limited impact likely due to restricted database permissions, but could potentially be escalated." So 3.1 vector: CVSS:3.1
SQL injection in Best Salon Management System 1.0 through the Name parameter in /panel/add-staff.php allows authenticated remote attackers to read, modify, or delete database contents. Publicly available exploit code exists, but the low EPSS score (0.06%) and low CVSS impact suggest limited real-world exploitation risk.
SQL injection in Best Salon Management System 1.0 allows remote attackers with low privileges to manipulate database queries via the viewid parameter in /view-appointment.php. A public proof-of-concept exploit exists but active exploitation is not confirmed. The flaw can lead to unauthorized data access or modification.
SQL injection in SourceCodester Best Salon Management System 1.0 allows remote authenticated attackers to manipulate the editid parameter in /edit-customer-detailed.php, potentially leading to unauthorized data access or modification. A publicly available proof-of-concept exploit exists, but no active exploitation has been confirmed.
SQL injection in SourceCodester Best Salon Management System 1.0 allows low-privileged authenticated attackers to extract or modify database content via the /add-customer.php endpoint. Public exploit code is available, lowering the barrier for exploitation, though no active exploitation has been confirmed (not in CISA KEV) and EPSS indicates a low probability of widespread attacks (0.06%).
CVE-2025-6580 is a critical SQL injection vulnerability in SourceCodester Best Salon Management System 1.0 affecting the Login component's Username parameter. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary SQL queries, potentially leading to unauthorized data access, modification, or deletion. The vulnerability has been publicly disclosed with proof-of-concept code available, increasing exploitation risk.
A vulnerability was found in SourceCodester Best Online News Portal 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/change_pass.php via the password parameter. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
SourceCodester Best Employee Management System 1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/Operation/User.php page. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the website_image, fname, lname, contact, username, and address parameters. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.