Medium severity4.7NVD Advisory· Published Oct 13, 2025· Updated Apr 29, 2026
CVE-2025-11663
CVE-2025-11663
Description
A weakness has been identified in Campcodes Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/manage-services.php. This manipulation of the argument sername causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:campcodes:online_beauty_parlor_management_system:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:campcodes:online_beauty_parlor_management_system:1.0:*:*:*:*:*:*:*
- (no CPE)range: =1.0
Patches
Vulnerability mechanics
References
5- github.com/HYLCXH/CVE/issues/12nvdExploitIssue TrackingThird Party Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
- www.campcodes.comnvdProduct
News mentions
0No linked articles in our index yet.