CVE-2021-27545

published 2021-04-15

CVE-2021-27545: SQL Injection in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to obtain sensitive database…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

SQL Injection in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to obtain sensitive database information by injecting SQL commands into the "sername" parameter.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
phpgurukul	beauty_parlour_management_system	—	—

CWE-89