Security Advisory

CVE-2025-26157

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-02-14 00:00:00

Last updated 2025-02-14 19:22:12

Assigner mitre

State PUBLISHED

Description

A SQL Injection vulnerability was found in /bpms/index.php in Source Code and Project Beauty Parlour Management System V1.1, which allows remote attackers to execute arbitrary code via the name POST request parameter.

← Browse all CVEs View on cve.org ↗