Medium severity6.3NVD Advisory· Published Oct 6, 2025· Updated Apr 29, 2026
CVE-2025-11330
CVE-2025-11330
Description
A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/sales-reports-detail.php. Such manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:phpgurukul:beauty_parlour_management_system:1.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phpgurukul:beauty_parlour_management_system:1.1:*:*:*:*:*:*:*
- (no CPE)range: 1.1
Patches
Vulnerability mechanics
References
7- github.com/xiaoxinkaishi/cve/issues/6nvdExploitIssue Tracking
- github.com/xiaoxinkaishi/cve/issues/7nvdExploitIssue Tracking
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- phpgurukul.comnvdProduct
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.