CVE-2025-3370 : faille critique phpgurukul men salon management system (CVSS 9.8)

A vulnerability classified as critical has been found in PHPGurukul Men Salon Management System 1.0. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

Sévérité

Critique (CVSS 9.8)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitation active

Non signalée par la CISA

Publication

7 avr. 2025

Dernière mise à jour

17 juin 2026

• phpgurukul men salon management system

• Fiche CVE-2025-3370 sur le NVD (NIST)
• github.com/1SHOTSEC/CVE/issues/1
• phpgurukul.com/
• vuldb.com/
• vuldb.com/
• vuldb.com/