CVE-2025-26157

Summary

CVE-2025-26157 is a SQL Injection vulnerability that affects the Source Code and Project Beauty Parlour Management System V1.1. This issue is located in the /bpms/index.php file, where a POST request containing malicious SQL code in the name parameter can be exploited by remote attackers. Successful exploitation allows the execution of arbitrary code, posing a significant security risk. Users are strongly urged to update their systems to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.