1000 Projects Beauty Parlour Management System index.php sql injection
CVE-2024-11258

9.8CRITICAL

Key Information:

Vendor: 1000 Projects
Status: Beauty Parlour Management System
Vendor: CVE Published:; 15 November 2024

🔔 Create 1000 Projects Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2024-11258?

A security vulnerability in the 1000 Projects Beauty Parlour Management System 1.0 allows an attacker to perform SQL injection through the manipulation of the 'username' parameter in the /admin/index.php file. This unauthorized manipulation could lead to the disclosure of sensitive information or unauthorized access. The vulnerability can be exploited remotely, making it critical for users of this system to address this concern promptly. Public disclosure of the exploit invites potential malicious activities, underlining the importance of immediate remediation and updates.

Affected Version(s)

Beauty Parlour Management System 1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2024-11258 - Proof of Concept