CVE-2026-37431 - Vulnerability Analysis

Overview

Beauty Parlour Management System v1.1 contains a SQL injection caused by unsanitized 'aptnumber' parameter in /appointment-detail.php, letting attackers access sensitive database information, exploit requires crafted SQL input.

Severity & Score

Impact

Attackers can access sensitive database information, potentially leading to data disclosure or further compromise.

Mitigation

Update to the latest version with SQL injection fixes.

References

• https://github.com/Y4y17/CVE/blob/main/Beauty%20Parlour%20Management%20System/SQL%20Injection-2.md

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner