Security Advisory

CVE-2025-11330

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-10-06 09:32:07
Last updated 2026-02-24 06:45:22
Assigner VulDB
State PUBLISHED

Description

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/sales-reports-detail.php. Such manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.