CVE-2025-3690
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Apr 16, 2025
Updated: Apr 24, 2025
CWE ID 74
CWE ID 89
Summary
CVE-2025-3690 is a critical vulnerability affecting the PHPGurukul Men Salon Management System 1.0. The issue arises due to improper handling of user input in the file /admin/edit-services.php, leading to SQL injection. An attacker can exploit this remotely by manipulating the 'cost' argument. The exploit for this vulnerability has been publicly disclosed, increasing the risk for potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.