CVE-2026-2088

CWE-74CWE-89 — SQL Injection3 documents3 sources
Severity
6.9MEDIUM
EPSS
0.0%
top 98.33%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Beauty Parlour Management System
Timeline
PublishedFeb 7

Description

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/accepted-appointment.php. Such manipulation of the argument delid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
PHPGurukul Beauty Parlour Management System accepted-appointment.php sql injection↗2026-02-07
▶
GHSA
GHSA-f56p-8g2x-4rg5: A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1↗2026-02-07
▶
CVE-2026-2088 (MEDIUM CVSS 6.9) | A vulnerability has been found in P | cvebase.io