Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-9919 1 1000projects 1 Beauty Parlour Management System 2025-09-10 7.3 High
A vulnerability was identified in 1000projects Beauty Parlour Management System 1.0. This affects an unknown function of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
CVE-2025-9930 1 1000projects 1 Beauty Parlour Management System 2025-09-08 7.3 High
A security vulnerability has been detected in 1000projects Beauty Parlour Management System 1.0. This impacts an unknown function of the file /admin/contact-us.php. The manipulation of the argument mobnumber leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.