Security Advisory

CVE-2024-13072

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-12-31 15:00:11
Last updated 2024-12-31 15:53:19
Assigner VulDB
State PUBLISHED

Description

A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add-customer-services.php of the component Customer Detail Handler. The manipulation of the argument sids[] leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.