SQL Injection Vulnerability in SourceCodester Best Salon Management System

CVE-2025-6877

What is CVE-2025-6877?

A SQL injection vulnerability exists in the SourceCodester Best Salon Management System version 1.0, specifically in the /panel/edit-category.php file. Exploitation of this vulnerability can allow an attacker to manipulate the 'editid' argument, potentially leading to unauthorized access to the database. This threat can be executed remotely, posing significant risks to data integrity and security. The vulnerability has been disclosed publicly, increasing its likelihood of exploitation.

References